00fef125239902d8c391db591b118bf5 | Triage

Sharing

General

Target

00fef125239902d8c391db591b118bf5
Size

178KB
MD5

00fef125239902d8c391db591b118bf5
SHA1

698019503cdd652c126603151a6d49a1be6a0db1
SHA256

762e6235567d3e7e36ce1dcc6cd554df22cd135918c5bfc8887b0b194783d84e
SHA512

885e0960d56dd4f2988268d63e92c8a1b742532e73c58fc574cd0c9c91285f899c15366ce1afad09d762a84ead21d4b9373daf6b4510207038cad6a374dd5677
SSDEEP

3072:vAVILMQHLsDa5ZOqX0wt7V+N2U6OYuYMy+X568O7djf5JclyE:vAzQHLsm5ZOre7V+ABJuYMycEdjf5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00fef125239902d8c391db591b118bf5

Files

00fef125239902d8c391db591b118bf5
.exe windows:4 windows x86 arch:x86

5408a9050eb956da67b32ed174f8ab66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrStrA
StrChrIA
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE