25b2ac7c9068c0ca61277bdedc469fc4 | Triage

Sharing

General

Target

25b2ac7c9068c0ca61277bdedc469fc4
Size

147KB
MD5

25b2ac7c9068c0ca61277bdedc469fc4
SHA1

9b1a7136f131c0ab657325e7e424558160f7c5e6
SHA256

5bac26b7c053ed6f5f1e80a6d80af5a8ba06fa4dbe729afa460928647549c2e4
SHA512

c6554bd9bcf78b562c59756ec408f86b81fb1f15c496313438161ceff0c19b9250cf9cd0e23c6634f7a565b2b51ecee167f9fe0c9773021d1f1642ecc50d01c3
SSDEEP

3072:yA4GU4QVmTIVPE7YaXYCfNicisIIMQgqoMNw21cuFQaArhGOU1nmi5GuMj:yF4OVPasyFQaAUn+uMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b2ac7c9068c0ca61277bdedc469fc4

Files

25b2ac7c9068c0ca61277bdedc469fc4
.exe windows:1 windows x86 arch:x86

4d82a1a8ac7dae247b7e65f9bf1173b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleA
FormatMessageA
LocalFree
GetTickCount
LocalAlloc
InterlockedCompareExchange

user32

GetCursorPos
CharToOemBuffA

crtdll

__GetMainArgs
exit
raise
signal

mswsock

s_perror

ws2_32

WSASocketW
WSAEventSelect

advapi32

RegOpenKeyExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 427B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE