253bd79e946cb4b78e9f686113c50ecf | Triage

Sharing

General

Target

253bd79e946cb4b78e9f686113c50ecf
Size

9KB
MD5

253bd79e946cb4b78e9f686113c50ecf
SHA1

4911447fe0de91568d81ea91e221176ef2e9cff1
SHA256

c61445c04293c15593309e522a33ec1ab3e08d877374a1027cbd839c22109859
SHA512

92829a0ca385ebe1ed28da36440ba50a4d427902e88075b4362a2ec4e89ab31f38d4f4b0d14eb5b439acf36a54a9524912152db65cdbe01be19b508c8e44af9c
SSDEEP

48:CxzhRne4G/62SO0RkHXxT8GSP1WiIZkfZfjgTBd4v2MQG:613W62SvRkHXxoHPM3kfZfoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
253bd79e946cb4b78e9f686113c50ecf

Files

253bd79e946cb4b78e9f686113c50ecf
.exe windows:4 windows x86 arch:x86

0bd6ea89bf6eaaaaa3bebac7760b5ede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
GetCurrentProcessId
lstrcatA
GetSystemDirectoryA
Sleep
VirtualFree
GetWindowsDirectoryA
CompareStringA
CreateToolhelp32Snapshot
Process32First
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
CreateProcessA
Process32Next

user32

wsprintfA

shell32

SHGetFolderPathA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE