ac825c0fcee766c26a13d9bd41c682a8 | Triage

Sharing

General

Target

ac825c0fcee766c26a13d9bd41c682a8
Size

741KB
MD5

ac825c0fcee766c26a13d9bd41c682a8
SHA1

3d2b6f6bbc58d1f66d58481539a1b4320a8160ff
SHA256

32ce04cf77d1483bac9a5964203fbdb9989e9d9ec1f1bc763762192603ea29f7
SHA512

6c0adf2b6abccb62f34dd4b86075c6687dcc04e225c5cd002a701bd4b27fa12b91772e7aeb0e542b91dae49e0b6ce4a0dd740755d556c4db29a5d36910485493
SSDEEP

12288:aK1eJe0mClbWMyMIRf8AZhWxrQ/z/2NDtvBpdGhnqIs8N/o:ZkpByMIV84hB/z/2dj6hLN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac825c0fcee766c26a13d9bd41c682a8

Files

ac825c0fcee766c26a13d9bd41c682a8
.exe windows:4 windows x86 arch:x86

88da370d5e941c042151fbb14dedacf6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetStartupInfoW
CloseHandle
HeapCreate
WaitForSingleObject
GetTickCount
CreateMutexW
GetModuleHandleA
FindClose
ReleaseMutex
AddAtomW
FindClose
DeleteFileA
GetTickCount
ResetEvent
HeapSize
GetFileSize
InitializeCriticalSection
CreateFileA
SetEndOfFile
GetEnvironmentVariableA
ExitProcess
HeapDestroy
GetCurrentDirectoryA
SuspendThread

wininet

FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpPutFileA
FtpGetFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
HttpQueryInfoA
HttpEndRequestA
FtpOpenFileA
DeleteUrlCacheEntryA

perfos

CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 735KB - Virtual size: 734KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ