205a25e14d26fe9c32c3dbb08cbc8023 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

205a25e14d26fe9c32c3dbb08cbc8023
Size

5KB
MD5

205a25e14d26fe9c32c3dbb08cbc8023
SHA1

c032194e3828ca014410d4f3dcf4feb9644d1727
SHA256

2edac01e4e24f1ecdb914f7f86f2fd79b144411364bb33895d08751eb5da0e20
SHA512

0da75a905b90e97b7614e62ea3f52416072d46cf18737fa217cc600e90f9a2cb700d9307d472e0023a27e7b7534ee3947d2197e8745b64b8cbd00e25ab8e217e
SSDEEP

48:ymMRPV4n4fBMhtgyu911768v2EIci/6TorBF6pFjJmGJ4XVGxGIGSthrFKpfAZUS:kb2htgFp68v2EItbMmGlhSfm81JQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
205a25e14d26fe9c32c3dbb08cbc8023

Files

205a25e14d26fe9c32c3dbb08cbc8023
.exe windows:4 windows x86 arch:x86

eeae0a7137e5468e82316052af18cf92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
MoveFileExA
Sleep
VirtualAlloc
VirtualFree
lstrcatA
lstrcpyA

user32

FindWindowA
FindWindowExA
SendMessageA
ShowWindow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE