058025a20c9c81b9d73ec9bbec00cdae | Triage

Sharing

General

Target

058025a20c9c81b9d73ec9bbec00cdae
Size

697KB
MD5

058025a20c9c81b9d73ec9bbec00cdae
SHA1

ed626eb9a02cb5592cc8e61d5f763873c28bf0a7
SHA256

d5bf99469279535d741eb3e7d284a3f9f4198d73f59c470c66adae09ef812cc9
SHA512

c7b3d1ac22625a932af6cdc683f79d59d470e955c33d2836b68f0ad5de1efcd90b5adbfce5532a1bd0296e8bd8ee775edf038497fa3a624de2b315d3c04aceba
SSDEEP

12288:GcMY2qZCsOwOA69KbuEfIGOWbRmGVRLIa+OKigmIZt2bpLko:GvZZ3AbdIGnVNVrWmI7K1ko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
058025a20c9c81b9d73ec9bbec00cdae

Files

058025a20c9c81b9d73ec9bbec00cdae
.exe windows:4 windows x86 arch:x86

90e8c94e74463dc34010b4cf45ee60c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
GetCommandLineA
CloseHandle
lstrcpyA
lstrcatA
GetStartupInfoA
GetModuleHandleA
Sleep
GetTickCount

msvcrt

wcschr
memmove
_exit
rand
wcslen

Sections

.text
Size: 1024B - Virtual size: 947B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ