2a7b919962181a8e1dca785e17f9e99ad37ffe648c35b80a9c563a6d65a7e820N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7b919962181a8e1dca785e17f9e99ad37ffe648c35b80a9c563a6d65a7e820N
Size

2.0MB
MD5

c8a8750981bf244b6e0a7cc325fb3080
SHA1

51d1c91afb572afcd694794042408441d46a006c
SHA256

2a7b919962181a8e1dca785e17f9e99ad37ffe648c35b80a9c563a6d65a7e820
SHA512

d88d0b32e9dfe2982054cf75b38f9fb48c8268cc6ac974ddc41ce7a5e98a730abf5046daaacacc71eeba69eb8e6640b135705bc7cbb297eda742f9ae3cb314a6
SSDEEP

24576:2TsPLdgNzyRcRqfOMiziEtd/yGo4hhKDTjxMhv4z5UrdwYCrDKzKAVAfWIONpwMZ:2wPLdgt/DMmztdthIdomke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7b919962181a8e1dca785e17f9e99ad37ffe648c35b80a9c563a6d65a7e820N

Files

2a7b919962181a8e1dca785e17f9e99ad37ffe648c35b80a9c563a6d65a7e820N
.exe windows:4 windows

c180248b7231f5ae8faf6b1d189342b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualAlloc

user32

GetActiveWindow

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE