255be388b77d817938f2a3bbfa3b06da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

255be388b77d817938f2a3bbfa3b06da
Size

99KB
MD5

255be388b77d817938f2a3bbfa3b06da
SHA1

454def9c672f94e3bc06ad19e80c7baa291a517b
SHA256

13c3fbe480c8d96b06d0d701d5bcf328c38445ab9a3da9da6b96728073b908ec
SHA512

549e7b23e7b041a6422f718e4790164ea2c8bebecff7bec19888c842ad85eee914c039287cc45575b7045b1e6385d6f512678030b6ffe80752a3a2bb82875749
SSDEEP

1536:OjAEl3PRrauRenf+eca+mF2DoglKmjSK2RMT/Pa5cZk+x8GCMioNZ5MVaLYLLcom:cCrWCRMDHZk+YK5hLYXcf/YCXRmuAuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
255be388b77d817938f2a3bbfa3b06da

Files

255be388b77d817938f2a3bbfa3b06da
.exe windows:4 windows x86 arch:x86

71046a5dfb6e2675d0d0069980b6f899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindAtomW
FindClose
ReadFile
GetModuleFileNameA
GetModuleHandleA
GetConsoleAliasW
TlsGetValue
ResumeThread
EnumCalendarInfoW
EnterCriticalSection
GetCurrentThreadId
lstrlenW
LocalFree
SetLastError
GetPrivateProfileStringW
GetDriveTypeW
SetEvent
GetNumberFormatW
GetCurrentProcessId

user32

DispatchMessageA
GetClassInfoA
GetClientRect
GetKeyboardType
GetCursorInfo
GetSysColor
GetKeyState
SetFocus
IsWindow
DrawTextW
GetMenuInfo
DispatchMessageA
CallWindowProcW

wsnmp32

SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ