4025d481714cca647be9fdcdfe49be59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4025d481714cca647be9fdcdfe49be59
Size

118KB
MD5

4025d481714cca647be9fdcdfe49be59
SHA1

4597f1cbd3730b9a72085ad3c94cf8a04bd3be63
SHA256

22433b9b3dbc850aed676e74141850ad0b041ef85e042593967591bca8cac896
SHA512

21e44e71d26347b7f4734f726a2481a2cde7e7b33ed7d836300dbcc8a1ea30c790868f8473813667eb0be676fedb6e1766c921887c31fded2e5e9fa36e665e69
SSDEEP

3072:ZG+BA6QpgKhJmTMHgdLzEynFWc2Z+QG0P5GbKh2Yq:ZLA5GJQAdLzjFWcsP5GbKh25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4025d481714cca647be9fdcdfe49be59

Files

4025d481714cca647be9fdcdfe49be59
.exe windows:4 windows x86 arch:x86

35a4942e0773bf7ba132e0584d0e06a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE