2b1f00a9f9b7796944ce819257b71c4995108467b21b16897ac7f5c17edb3d61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b1f00a9f9b7796944ce819257b71c4995108467b21b16897ac7f5c17edb3d61
Size

3.1MB
MD5

3a3c6eac7534408262f186be9fc4c909
SHA1

50102e87ea2816b88284df3763d503dd7f9c845c
SHA256

2b1f00a9f9b7796944ce819257b71c4995108467b21b16897ac7f5c17edb3d61
SHA512

917644df0548cf9be9ab1c4425aacd0a5e278edfc731e07b9db435f7d7300cfe9dc40924a569510aedf1d45a5df05cf751bf51bad9721f822c1fe88e5c7049e6
SSDEEP

98304:M6/DsEL9MAnxnWRxf1i+Bfo/F61uFLOAkGkzdnEVomFHKnP:M6/DsHZo/F61uFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b1f00a9f9b7796944ce819257b71c4995108467b21b16897ac7f5c17edb3d61

Files

2b1f00a9f9b7796944ce819257b71c4995108467b21b16897ac7f5c17edb3d61
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

� U��S�
Size: - Virtual size: 1823.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hulfyzgw
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jltmwein
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE