525cdf884cc6249aed4349cb5f6ae90a | Triage

Sharing

General

Target

525cdf884cc6249aed4349cb5f6ae90a
Size

52KB
MD5

525cdf884cc6249aed4349cb5f6ae90a
SHA1

40e73ef87d4a3c5c4ddbab4a08480e229ed072d5
SHA256

720f4aaaf0025efe267c870a293e418e964ebce84c8cd48173a90f35bfae2404
SHA512

dbec2bcfdf9b0509f42f37968a7fbe6da4bdd49820a7af3edfa605a6333a5237c19a03f142013163d951180676b09b43386ee806db2cff6b4d5888615201e38d
SSDEEP

768:qVjgo/y8uAX5OT6kwonP9iN5dpy6TlFDu6YDd3QAwgjpWfhwiYsOR:KpOTflnliN5dLDibdlwgQfhusOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525cdf884cc6249aed4349cb5f6ae90a

Files

525cdf884cc6249aed4349cb5f6ae90a
.exe windows:4 windows x86 arch:x86

e1131a5696e784e88f12c46f7a1d8c8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
memset
sprintf
_snprintf
memcpy
malloc
strtok
strcmp
strcpy
free
srand
rand
__p__commode
strlen

kernel32

TerminateProcess
OutputDebugStringA
Sleep
OutputDebugStringW
FindResourceA
LoadResource
SizeofResource
LockResource
GetTickCount
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ