25912981d87396237c581e0cad392e4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25912981d87396237c581e0cad392e4f
Size

88KB
MD5

25912981d87396237c581e0cad392e4f
SHA1

320d3ee5a5bc588b4dbc05cd86b81bebf190b24d
SHA256

937e4f28a191592ec247fb3b1d565bd7d1bac192cdf243eeccb5322c0c667695
SHA512

e1883e3bde7b1c2602d9b4a1fbca04453bd8851f85fa737646249bbfccfc92266b1d58c2c4d6056fb697c77108a9791ee7b5fb6dd02c695f3c3277ec6e056f37
SSDEEP

1536:xDGsjIO/eqd0AMabNoWTM4fe+MBD+antol7kLwu0vI9wc:xXc9aI+OD+amEU2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25912981d87396237c581e0cad392e4f

Files

25912981d87396237c581e0cad392e4f
.exe .js windows:4 windows x86 arch:x86 polyglot

6a37a03ab70cbcace5b1fc488f3dd7de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetProcAddress
LoadLibraryA
GlobalFree
DeleteFileA
MoveFileExA
GetSystemDirectoryA
Sleep
CopyFileA
SetFileAttributesA
GetVersionExA
GetCurrentThreadId
CloseHandle
CreateFileA
GetLastError
SetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetTickCount
MultiByteToWideChar
lstrlenA
FreeLibrary
TerminateProcess
OpenProcess
lstrcmpiA
CreateMutexA
WinExec
GetModuleFileNameA
GetEnvironmentVariableA

msvcrt

fclose
_wcsnicmp
??3@YAXPAX@Z
swprintf
wcscpy
??2@YAPAXI@Z
wcslen
sprintf
_stricmp
fseek
fwrite
fopen
srand

Sections

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE