025fdf2531ccede4ca171b8b02e72e2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

025fdf2531ccede4ca171b8b02e72e2d
Size

453KB
MD5

025fdf2531ccede4ca171b8b02e72e2d
SHA1

420578728d70ca35329bc5eea2d9ede90602bbf3
SHA256

50f48802e777914870ebd09efdabf41f5ef7abb42822163581f79e284af60014
SHA512

9b3d9298baaa3c68619b51070e67a84fcd4839add1b749eaae81d8d11a478e5c29a10a9707db697f57966cb1b5ff556a27b0fb4af82b13bb670d311d55966699
SSDEEP

12288:BuB/0Mvlj+gzFgjVrZh6R65nR8Lv/nT9nU:Bu50QzFgBzwmMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
025fdf2531ccede4ca171b8b02e72e2d

Files

025fdf2531ccede4ca171b8b02e72e2d
.exe windows:5 windows x86 arch:x86

61a951a74048be5c5a6c6083584f9072

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
WriteFile
FindClose
GetProcessHeap
ClearCommBreak
CreateDirectoryA
GetModuleFileNameA
WaitForMultipleObjects
RemoveDirectoryA
GetCommandLineA
SetEndOfFile
AddAtomA
GetFileType
CreatePipe
FindAtomA
GetDriveTypeW
DeleteAtom
GetModuleHandleA
IsBadWritePtr
CloseHandle
HeapCreate
HeapFree
SetVolumeLabelA
CreateSemaphoreW
ExitThread

cryptui

WizardFree
DllRegisterServer
CryptUIDlgViewContext
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIWizImport
LocalEnroll
DllUnregisterServer
CryptUIWizDigitalSign
LocalEnrollNoDS
WizardFree
CryptUIStartCertMgr

msvidc32

DriverProc
DriverProc
DriverProc
DriverProc

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE