250a78fe5a46ebecd6b308ed32c9c4d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

250a78fe5a46ebecd6b308ed32c9c4d9
Size

130KB
MD5

250a78fe5a46ebecd6b308ed32c9c4d9
SHA1

c6238edb296016ad1047c258b67965fb7db31d99
SHA256

cb7bcd5c5bd5f622e221f9f13e4885a60b06e0a352465322795081d6e180dfa2
SHA512

0f8eb8048e6c5376d03f4ceeb37ed718a80a0744935243819189e4ae31b1157a92243ca449abf2485b472aa9a798250245a060648b3fdcec28a3340b9dcb1f97
SSDEEP

1536:KKuaUfaSmFkuf/OZKbFVkBNPUREB0Lnb3ZElx8RHnvtEd+R2WrpR7Yy5RUaY93sx:efa/kuf/94NPU20D5Kdg2WHFR9k3PqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250a78fe5a46ebecd6b308ed32c9c4d9

Files

250a78fe5a46ebecd6b308ed32c9c4d9
.exe windows:4 windows x86 arch:x86

bc3baeb9ece9ceca28249642b555e403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

gdiPlaySpoolStream
WidenPath
UpdateICMRegKeyA
UpdateColors
UnrealizeObject

comctl32

_TrackMouseEvent
CreateMappedBitmap
DSA_DeleteAllItems
UninitializeFlatSB
GetEffectiveClientRect
PropertySheet
ImageList_Replace

msvcrt

wscanf
wprintf
wctomb
wcsxfrm
wcstoul
wcstol

wsock32

bind
closesocket
connect
inet_ntoa

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE