253d6a7a2d41ae08a013f82540b52490 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

253d6a7a2d41ae08a013f82540b52490
Size

128KB
MD5

253d6a7a2d41ae08a013f82540b52490
SHA1

b9298bcfc96383850de7af50ec98798e39f15422
SHA256

6d04f74ecc774408ec2ae0f0243833dd82af6f77cef4c01723f3a5ea4f5a7c03
SHA512

16a90be6730f3d0fef7f45805db36115f0d88dcb048e4d489bc4d54c6a6beb7284df270cf03944e6bfcad8fa6ce11060326f6a80357e18fd25a52af2f11d97e0
SSDEEP

3072:zDl3fEC/iwlCE7j3F/DdnBA2KF5nF6a2xk:N3sC/lU+JBav+Vk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
253d6a7a2d41ae08a013f82540b52490

Files

253d6a7a2d41ae08a013f82540b52490
.exe windows:4 windows x86 arch:x86

e2f53c035d87c43c6cf0184d4883168e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapDestroy
GetModuleHandleA
CancelIo
DeleteFileW
GetCommandLineA
GetStartupInfoA
CloseHandle
VirtualQuery
Sleep
ResetEvent
CreateEventA
GetVolumePathNameA
GetTimeFormatA
FindResourceW
GetCommandLineA
TlsGetValue
CloseHandle
lstrlenA
GetEnvironmentVariableA

user32

FindWindowA
DestroyMenu
GetSysColor
CallWindowProcA
IsZoomed
DispatchMessageA
IsWindow
GetClassInfoA
DrawTextW
CreateIcon
PeekMessageA
DispatchMessageA
GetWindowLongA

psbase

SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE