2508729d7dd2b724ad33397072cef9c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2508729d7dd2b724ad33397072cef9c4
Size

480KB
MD5

2508729d7dd2b724ad33397072cef9c4
SHA1

e48b9e03f470a55d97546d1c810f0d234e5126db
SHA256

3ab5fd03f830e5da169920b65847aa82433265b9679e4ca66de6cd86f8dfbac1
SHA512

54013ac654a933f33e6062c99a72509a6bdc2dbed2048ce4e22791d9569d28191c17cbd55bb6c112c9fcd670a00dcf98d6ee276fd29b469d8f76b8d4529ee715
SSDEEP

12288:EHpYNqh9fe9qGV9GLCsPziSxjiwaeVNaJHqKCSCcohHZ4poGSxe:E6Mh9whMLCs7ZxjRYtNCcW2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2508729d7dd2b724ad33397072cef9c4

Files

2508729d7dd2b724ad33397072cef9c4
.exe windows:4 windows x86 arch:x86

66603284fe6875c46a28d2c50c38cafd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHTestTokenMembership

ntdll

RtlLookupElementGenericTable

oleaut32

VarDecAdd

user32

GetDialogBaseUnits

kernel32

GetCurrentThread
GetCommandLineA

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE