04addf2f6e094883c3f9dffe0a769d41 | Triage

Sharing

General

Target

04addf2f6e094883c3f9dffe0a769d41
Size

770KB
MD5

04addf2f6e094883c3f9dffe0a769d41
SHA1

6d49722532fa55986810ce18a2208b8c82f423f7
SHA256

05d3835664225981839520fdfe68abe1134f35ef6e05c3747aff1ecbe9f005b4
SHA512

134d2d2e1d0bcd88dbdd108929dde5739b0e7669119ed313c89822b1ed3e341be50af52ea857edcc7c4222b67b0690d85b7d23cba145bfd7662ba192ed72ba5b
SSDEEP

24576:j+BHxT2TnfSa6SkOcAYYwk9eMz5mBYWN2Tl:j+BHxTqnFXLwkXKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04addf2f6e094883c3f9dffe0a769d41

Files

04addf2f6e094883c3f9dffe0a769d41
.exe windows:4 windows x86 arch:x86

5f4dbbbb9df230e1b1a10460379496e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
Sleep
GetCommandLineA
GlobalSize
CloseHandle
lstrlenW
GetTickCount
GetStartupInfoA
GlobalFlags
GetTimeFormatA
DeleteFileA
SetConsoleCP
HeapCreate
GetModuleFileNameW
CreateEventA
CloseHandle
GetModuleHandleA
GetExitCodeProcess
ReleaseMutex
SetFilePointer

user32

DestroyWindow
FillRect
PeekMessageA
DispatchMessageA
DispatchMessageA
BeginPaint
IsWindowVisible
DrawTextW
LoadImageA
GetParent
GetWindowLongW
CallWindowProcW
SetFocus

loghours

DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog

wininet

FtpCommandW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ