2bba5dc5f7150636e9075a6f28f3bcae5d9f32a3322ac1b7d23d8f749f5de84bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bba5dc5f7150636e9075a6f28f3bcae5d9f32a3322ac1b7d23d8f749f5de84bN
Size

2.0MB
MD5

0cb7fe17cd297ab8c09b3bb4181d1af0
SHA1

019a9a83ad8fca50dc7193c043e20e29ec6c730c
SHA256

2bba5dc5f7150636e9075a6f28f3bcae5d9f32a3322ac1b7d23d8f749f5de84b
SHA512

b9abdfb65d89d282ed1ea3f9d1fd4bd21465af6a0e177ad6e84222a3ee706dc38e623135bded41443ba148fd89487e8f22a160d2dcd31eebe9a42895e023c147
SSDEEP

24576:RYBTwOBux+aoQwpiH5bymy3L7ZMaEPihXHToWFmnMipp9jHWHKIi28hCw5g0Jo42:uhLBuRoQVHtY7ZWId1iFxjFvCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bba5dc5f7150636e9075a6f28f3bcae5d9f32a3322ac1b7d23d8f749f5de84bN

Files

2bba5dc5f7150636e9075a6f28f3bcae5d9f32a3322ac1b7d23d8f749f5de84bN
.exe windows:4 windows

e99d6abd14dfd973a226ef882df136f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetSystemDefaultUILanguage
VirtualAlloc

user32

GetCursor

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE