257f29de9b44cd5ef8f45713ce7d1c29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257f29de9b44cd5ef8f45713ce7d1c29
Size

335KB
MD5

257f29de9b44cd5ef8f45713ce7d1c29
SHA1

5d8cbcc0da09f66cf10d959f9aeaad272404ab1e
SHA256

56a7e2a479e06c27a9f33f0d6c4265a7c5a733c9df04942027de979fea2c0666
SHA512

2d920d583b8a42dccbf552a8a58f84e5a34295671427d461df5cc472b8ef5653485813f20ae58a92d6c6364eb811ede5af9476b9fa8f1f419cb9b7aeb5c60937
SSDEEP

6144:u5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:zPVCI0rIoUpP/5rKFrV3aHGu1a/ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257f29de9b44cd5ef8f45713ce7d1c29

Files

257f29de9b44cd5ef8f45713ce7d1c29
.exe windows:4 windows x86 arch:x86

b77b2923a5861f52792bef9a955a2e93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
HeapCreate
GetModuleHandleA
GetComputerNameA
FindAtomW
GetTickCount
GetDiskFreeSpaceW
CloseHandle
LocalFree
ResumeThread
LoadLibraryW
GetFileAttributesW
GetSystemTime
SetLastError
CreateFileA
CreateThread
lstrcmpiW
SetEvent
ResetEvent
ReleaseMutex

user32

GetDlgItem
GetClassInfoA
DestroyCaret
CloseWindow
CreateWindowExA
DispatchMessageA
DrawStateA
FillRect
CallWindowProcA
SetFocus
GetClipCursor
GetKeyState
GetComboBoxInfo
MessageBoxA

cryptdlg

DecodeRecipientID
CertConfigureTrustA
CertTrustInit
CertTrustFinalPolicy
CertTrustCertPolicy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ