c2925ff6516e87d393eb22d532b0d734 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2925ff6516e87d393eb22d532b0d734
Size

196KB
MD5

c2925ff6516e87d393eb22d532b0d734
SHA1

d06efd6011653fa4254ac6934100e9cc3a873100
SHA256

52bf9181de7bf16d156e753455d15e1ec0a800f43031acb838404b123619b9e1
SHA512

a04e78459d547af0935664e92f78b755c7bc65cf115ab86db96ce32b06536772aaa9b6148cc37727f8c1b47205e6a2581f2e84b1410904cd3ea3b3677bfd7ceb
SSDEEP

6144:B0eFq3S1kt8JnSMBHZNXrLWtvSRW/nYPqh:B0eFq3NO9LXryuW/nYPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2925ff6516e87d393eb22d532b0d734

Files

c2925ff6516e87d393eb22d532b0d734
.exe windows:5 windows x86 arch:x86

86370ee345061b353eae4b50f97d81f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcW
PtInRect
DestroyIcon
IsDialogMessageA
LoadImageW
ReleaseDC
SetRectEmpty
SetLastErrorEx
GetUpdateRgn
IsRectEmpty
ExitWindowsEx
SetMenu
TranslateMessage
GetKeyState
ScreenToClient
SetActiveWindow
ChangeMenuW
TrackPopupMenu

kernel32

GetLocaleInfoW
EnumResourceTypesA
CloseHandle
HeapFree
SetupComm
GetLongPathNameW
UnmapViewOfFile
CreateMutexW
GetNumberFormatW
WaitCommEvent

gdi32

UnrealizeObject
EnumFontFamiliesExW
StretchBlt
ResizePalette
SelectClipRgn
GetLayout
RectVisible

comctl32

ImageList_Write
CreatePropertySheetPageW

shlwapi

PathIsContentTypeA

Exports

Exports

GetWindowExA@12
IsValidStateExA@16
GetPointerW@4
FreeFileOld@16
CopyNameOriginal@12

Sections

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE