support2[.]0[.]exe | Triage

Resubmissions

09/10/2024, 14:04

241009-rda5eswdrl 5

09/10/2024, 14:03

241009-rcre1swdqj 5

Sharing

Copy URL Twitter E-mail

General

Target

support2.0.exe
Size

505KB
MD5

521a361fe8fb6d8c560a00a2c15452e7
SHA1

7d04366a6e6544664937bd7702fec0996d0c2973
SHA256

39dd835e5e53956a03122cf97f763e0faeb25817d2fd3c3d386eb3e3894e7115
SHA512

74f3fbc8d6100dd4d7a96aae98547d5ee1ffbe37aaaaa275976a66566f4db00a38690b9184d65ff38d37a2c93536021ee632ed74ef2f2cc9863dbf997f17f1af
SSDEEP

12288:2v3WPrH1IhhFI8bsou03wJWnhOsXKJzxi3wf/pBDxcJAV:2+PrH2hzvQsf6JD/Xis

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
support2.0.exe

Files

support2.0.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o+]
Size: - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.+zi
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ