2255b250caa5550bb5cde6165ba1daeb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2255b250caa5550bb5cde6165ba1daeb
Size

9KB
MD5

2255b250caa5550bb5cde6165ba1daeb
SHA1

2c3d5acd264d8ba8f08e2f95801479d6bb828a37
SHA256

066138c2ebf4ea57ce25eb738acdcf799c9f6e0837a3d1855a65ed5bd18d5dce
SHA512

7cebdc198e16a757c69fa74faaba37ce50816565ec8b161472290cd7d7557c91d73ea80fbec463a63bb293c3ad1f71899fa28a959eb13e362a18ced28f76f17b
SSDEEP

192:2lgjKfL9oRLkdaDlMF5hswq2RR7tMZBA9I3Bc97zJWn8I8BSaW:2OjKfL6XqR7tMZBA959JWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2255b250caa5550bb5cde6165ba1daeb

Files

2255b250caa5550bb5cde6165ba1daeb
.exe windows:4 windows x86 arch:x86

e5191839bec184ff6c5738ab62fae1cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

lstrcatA
GetProcAddress
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
lstrlenA
lstrcpyA
GlobalAlloc
WriteFile
UnmapViewOfFile
Sleep
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GetLastError

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

wsock32

send
recv

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE