25f8e68d1f37ba224eea83cb4465dffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25f8e68d1f37ba224eea83cb4465dffa
Size

40KB
MD5

25f8e68d1f37ba224eea83cb4465dffa
SHA1

cfe82aad5fc4d79cf3f551b9b12eaf9889ebafd8
SHA256

e4695d66f5f4e3f1c43f2c7aa3731a7fa7f94b7862236ea67b2bd0f8bbdc94f4
SHA512

b3bcfb094c32aec4f4085426f3d1c1a6ceb8c0310dabbec307651ae09fe10c340b4745a6fdcdaa57393b04b97ee3d604f9711126363802a6451a95000d1228b7
SSDEEP

384:22b0TEETowSRjDST918e/lpunMmlrA+F1Q0zh5IcKyyE9Q328GJoZpyTEJ4:22mEeowUDSr8MAnU+jQOjKLFGJo0EJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f8e68d1f37ba224eea83cb4465dffa

Files

25f8e68d1f37ba224eea83cb4465dffa
.exe windows:4 windows x86 arch:x86

c0b9bf7cea4a0c50ce73c0a46d5f1cc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetShareEnum
NetUserEnum
NetApiBufferFree

mpr

WNetAddConnection2W
WNetCancelConnection2W

kernel32

HeapDestroy
GetStartupInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
ReadFile
FlushFileBuffers
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
GetOEMCP
CreateFileA
MultiByteToWideChar
GetCPInfo
GetACP
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE