f2fa872637aca1372a154c6385334fa8a7fff9d2f59523516ab6a2b8257c8f2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2fa872637aca1372a154c6385334fa8a7fff9d2f59523516ab6a2b8257c8f2b
Size

453KB
MD5

f04a1f8e18c3bd2d8219060c0ebcf517
SHA1

e7338be7ec7c784b050d8bf2af1863c3164bba4d
SHA256

f2fa872637aca1372a154c6385334fa8a7fff9d2f59523516ab6a2b8257c8f2b
SHA512

dbc0cbdeca29c8dcd60d083d86cd95eb7a53e6b6dabb0f13816908414fa80ec8ce475c1bb9d8b53c9cba11a6d44e5d63ef8613d12a6e0b85356ccd0b653c83e8
SSDEEP

3072:EjC9Jl2UkW1NUiLR37Ol8+mk5ZwfcT//jvMTUyOjVGAsfpxB1RPD:Ejc2sU8THh1RP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2fa872637aca1372a154c6385334fa8a7fff9d2f59523516ab6a2b8257c8f2b

Files

f2fa872637aca1372a154c6385334fa8a7fff9d2f59523516ab6a2b8257c8f2b
.exe windows:4 windows x86 arch:x86

2eda502d39734c2a70c5e0d029966397

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ