2825fd5906a0e3b660ea871928e26c93 | Triage

Sharing

General

Target

2825fd5906a0e3b660ea871928e26c93
Size

23KB
MD5

2825fd5906a0e3b660ea871928e26c93
SHA1

fd00db92cd65236e5618265e404af07faa02006f
SHA256

6bbab6bc3459891bc08b925fbdc05da647f935ffbcd063563b86e9f77be19088
SHA512

46851aec70df999bbe4656e3fbe04b288507598aaf6c06947580edaa8e6206e8512e45341ebfffdb8e56b1227a756e44c8a9a370ffb80932b9167c2ec836f4bb
SSDEEP

384:QO9MIjyOJ59W/8AoWZC1gvwniWUHjVAcCwUJuUCSFCJWe8EDEWW:jbjyOJ53AXC1gCFUH5AcPU48IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2825fd5906a0e3b660ea871928e26c93

Files

2825fd5906a0e3b660ea871928e26c93
.exe windows:4 windows x86 arch:x86

f849a00bbb3cee7069aad7ba5a14a2d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
DeleteFileA

user32

GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

strrchr
_stricmp
atoi
_itoa
_except_handler3

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ