ed0249869b9415468c6da3f59e2f46344bb848fbec2f524762b22fcd936bee57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed0249869b9415468c6da3f59e2f46344bb848fbec2f524762b22fcd936bee57
Size

94KB
MD5

8ab91896188113b48f29cd9403844275
SHA1

c2e0ea8f50aa7b93be6c4c1c8661099962118f0a
SHA256

ed0249869b9415468c6da3f59e2f46344bb848fbec2f524762b22fcd936bee57
SHA512

41dad12a05bf7330b899a0c3790cdd91ec4a045bf0b4d7ff161d5a09c28ad350a5af2e28660555f62d8c2c50bc9bd995ebb67ce71b67ca72a882e2325f17c387
SSDEEP

1536:n7OG1yPrqwemo84bpDyxz5Ul/Nf/gFepf0E8UjdPazWEOUYRsgq:RgPri8aWN5UvAFepfRRPMWEulq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed0249869b9415468c6da3f59e2f46344bb848fbec2f524762b22fcd936bee57

Files

ed0249869b9415468c6da3f59e2f46344bb848fbec2f524762b22fcd936bee57
.exe windows:4 windows x86 arch:x86

1c76cf3749240d097540bee05fed6850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetLastError
GetModuleHandleA
lstrcpyA
GetCommandLineA
lstrlenA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

_acmdln
isprint
isalnum
memset
memcpy
malloc
free
strlen
isupper
islower
_exit
_XcptFilter
exit
isspace
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ