25c7f4b166b0d90cb0f4a97d925c27a6 | Triage

Sharing

General

Target

25c7f4b166b0d90cb0f4a97d925c27a6
Size

178KB
MD5

25c7f4b166b0d90cb0f4a97d925c27a6
SHA1

0d649f6e710da1546fb8567387d3ea34e424b41f
SHA256

54be0f4c2013e89dc0db7b7212bc9d2988190514ff1c7102307f03f28d627be2
SHA512

7d14ef5969bc5dd3a41d552928538ec442b9e5ec33bab36592a5a9e717c41d5c523cd255057a8f5397fc333be179abb453608d097557536c313f6694fc86b2f2
SSDEEP

3072:/j4A4hTGijxjzB9aPeTUonU4rhuyHtvSbggx8rTSAKQ3uagM:/jLC5L9k9KUYuyHt/gxe3V3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c7f4b166b0d90cb0f4a97d925c27a6

Files

25c7f4b166b0d90cb0f4a97d925c27a6
.exe windows:4 windows x86 arch:x86

3fcf215989c3ed8cc812108a7443ac6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GlobalHandle
GlobalGetAtomNameW
GetCurrentProcessId
GetModuleHandleA
WriteFile
WideCharToMultiByte
IsDBCSLeadByte
EnumResourceTypesA
GetCurrentThreadId
EnumResourceLanguagesW
CreateMailslotA
FindFirstFileA
lstrlenA
QueryPerformanceCounter
FindNextFileA
SetFilePointer
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ