2ea05b5b9847fb2e777f4433a2f73cba12b96a8b074ab83179cbafbc49963665 | Triage

Sharing

General

Target

2ea05b5b9847fb2e777f4433a2f73cba12b96a8b074ab83179cbafbc49963665
Size

305KB
MD5

bfae2c479a12cbc660e580a84d3e3ce0
SHA1

0891b36b510049ef811deb93fcdacfdfdbfc406a
SHA256

2ea05b5b9847fb2e777f4433a2f73cba12b96a8b074ab83179cbafbc49963665
SHA512

ce53e1e95eee76f0f49e29b91ce27c35c972980ebd8e3ea2da387af40c667cae457288e183447e0513ed1c9ec0c4de5af6f81daddd77c533c437ee8496d59085
SSDEEP

6144:RJRGyoPwcMZAwSYQ1rL4OgbDetMfhiRdsLoOJ0tYRVlOPAKePNO4:dGyoPwcMZhnQ1rL4OKDeohi3sLo7WY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ea05b5b9847fb2e777f4433a2f73cba12b96a8b074ab83179cbafbc49963665

Files

2ea05b5b9847fb2e777f4433a2f73cba12b96a8b074ab83179cbafbc49963665
.exe windows:5 windows x64 arch:x64

75a1ace6800a8990783719f99f2f799f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CloseHandle
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetSystemInfo
LoadLibraryA
GetVersionExW
WaitForMultipleObjects

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.x64
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE