07d25a26a633a7dbbaac834c1b3cfd63 | Triage

Sharing

General

Target

07d25a26a633a7dbbaac834c1b3cfd63
Size

24KB
MD5

07d25a26a633a7dbbaac834c1b3cfd63
SHA1

46d19b32563fefb5f4a10b1322d719bb11055822
SHA256

116ba0dc8f8c08d49aa9e31d21d23e6047f2ef7c3ec280d4e395c94bebcee138
SHA512

255496139b3862d93091a1d5d0331f26c0d886b9ded61c1dedc6d82dfc3c0d7e3a73d526f9375b933fdb7b39cbbdab447e369199381ab294fd66a6c82e26e855
SSDEEP

384:GIfS5XaUjVMIKzbTsUsZQyrKbZRwXRomv:dfwauMIKzPsrCwXRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d25a26a633a7dbbaac834c1b3cfd63

Files

07d25a26a633a7dbbaac834c1b3cfd63
.exe windows:4 windows x86 arch:x86

f2ba75a728f1891c3d093a6a5e9fcc5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
FreeLibrary
DeleteFileA
lstrcpyA
lstrcatA
GetCurrentProcess
GetFileAttributesA
SetFileAttributesA
GetFileAttributesW
WinExec
GetModuleHandleW
GetProcAddress
CloseHandle
ExitProcess
GetModuleHandleA
GetCommandLineA
OpenProcess
GetShortPathNameA
GetEnvironmentVariableA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
TerminateProcess
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery

user32

MessageBoxA
ExitWindowsEx
wsprintfA

advapi32

RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA

shell32

ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE