2b6299ed051392c0ad1244244967ac1bf42a7743d07567887e9dc18352e76492 | Triage

Sharing

General

Target

2b6299ed051392c0ad1244244967ac1bf42a7743d07567887e9dc18352e76492
Size

120KB
MD5

80affcdccc25797af3deadac82bae480
SHA1

016be339264ba6056fef53bf793b44ecf7c6ce46
SHA256

2b6299ed051392c0ad1244244967ac1bf42a7743d07567887e9dc18352e76492
SHA512

db94d62f52787778cb48a08d7062ec107b0440170c31bc0d1c37c7ee1aefddfa9d49258f1ec3a342caf36d9b6f1b683951cfeda1d9247c4e37ccc139e0039034
SSDEEP

1536:JUVYLyOUVTfcWpUSKABHmqBfQdcU8lTihWk/NdB/1BWo3ALvNMIsf:JqOUVrbUSDBqsWhvt/1VKGIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6299ed051392c0ad1244244967ac1bf42a7743d07567887e9dc18352e76492

Files

2b6299ed051392c0ad1244244967ac1bf42a7743d07567887e9dc18352e76492
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ