2b9aa8aecf4fdbffe6af9a94e438caf70f06ebdcc20eb76e17259c75ddaaccc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b9aa8aecf4fdbffe6af9a94e438caf70f06ebdcc20eb76e17259c75ddaaccc5
Size

5.3MB
MD5

7faa406314f0957a5a5d7d413f7f0153
SHA1

f7958e9bdb343c2ab5131e74d3f814705dcb3cd7
SHA256

2b9aa8aecf4fdbffe6af9a94e438caf70f06ebdcc20eb76e17259c75ddaaccc5
SHA512

7e6b5fd1eb0e4fe4a03e8a5cc41e9a441053a927ad7cfd9e46049895621b970fd85348ebf6beb5d8436e84af37eaa496c5673228fba85bc78cb305653eb4d335
SSDEEP

98304:Ydo+/7qcYLJaFZeK8PzNXS3MWGjUTrK2Av8BXcFY:Y1/75caFIK8XfUTrK228cFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9aa8aecf4fdbffe6af9a94e438caf70f06ebdcc20eb76e17259c75ddaaccc5

Files

2b9aa8aecf4fdbffe6af9a94e438caf70f06ebdcc20eb76e17259c75ddaaccc5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE