25979c3989fc3c2a17aa324c5771d3fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25979c3989fc3c2a17aa324c5771d3fd
Size

42KB
MD5

25979c3989fc3c2a17aa324c5771d3fd
SHA1

6f704e7f2d9f3ceb5657efd2355bb6f85470dc1e
SHA256

72c23e1b0299f803f58fcd6d350ca0a0b77f828f1cd48be31c6ca43bdd2dbb63
SHA512

457ed831e4e7e577372b331ef6933a97aa391fe82032ef4694df3a5bf2b50d766cf51ca9dae897ee0b563f65c1484767eec642c6012ea5a6b3a5168a473995ad
SSDEEP

96:hj/WwVK3kWjJTHuBc2UFotgrtaD1+F+nQ:Fu0tS5zggID14+nQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25979c3989fc3c2a17aa324c5771d3fd

Files

25979c3989fc3c2a17aa324c5771d3fd
.exe windows:4 windows x86 arch:x86

85773a17eac8d4a521b00d2cca9b9ac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ