25be57fa289263874f12509eab8a26f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25be57fa289263874f12509eab8a26f2
Size

48KB
MD5

25be57fa289263874f12509eab8a26f2
SHA1

f59a59c3f0852789cefcafb850d5d14c76d30d81
SHA256

23c303d8255d685816949a02523b150e7caf0b129d12a82f34121a1f737c424f
SHA512

282bc034ae5b9906606e3a753c07b6873a029fc3e887a7ba885375fbf3b4f67ab212689924c6d026af4d9eb399bb18d092663b02dfda816e1c219c8972c36128
SSDEEP

1536:NgEu649E8ZauaP12XXyTEL2hngBq5ERmF8jgQ:KE69E8ZIPmXyqBq5ERu8jgQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25be57fa289263874f12509eab8a26f2

Files

25be57fa289263874f12509eab8a26f2
.exe windows:5 windows x86 arch:x86

89061d545e89d2b4649c0f7ccbc6eaa7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wvnsprintfA
PathRemoveFileSpecW
PathFileExistsW
SHDeleteKeyA
StrCmpNIA
wnsprintfW
wvnsprintfW
PathCombineW
PathFindFileNameW
wnsprintfA
StrStrW
StrCmpNIW

kernel32

GetSystemTimeAsFileTime

advapi32

CryptAcquireContextW
RegEnumKeyExA
CryptDestroyHash
CryptHashData
RegSetValueExA
GetUserNameW
RegCreateKeyExA

Sections

.wtcv
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zmz
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bcbax
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ