389d03539b882893e9f74ac2c21f8252ff46acfccd8f4634482687b1246a6211 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

389d03539b882893e9f74ac2c21f8252ff46acfccd8f4634482687b1246a6211
Size

14KB
MD5

281a6674590cd7f9bd9853fa42213934
SHA1

151197957ca522e873f619055f050ac4c9b1fc6d
SHA256

389d03539b882893e9f74ac2c21f8252ff46acfccd8f4634482687b1246a6211
SHA512

f520fd7cc6b960be3f9b355c87e4d5070b224b10b4386871013e9b1ff05e4355d47158d11e8727c0790cdf58b79f0edb521bf9a3ae260a91a03ba23c951fb877
SSDEEP

192:G7mcWKG94nKfztBUoUGAnQPhP0ITWrioJrCBriScpMmUik8Ainw2bO73zv4G4:TKawKfztBRzSypj9Br5mg70MTTQ

Score

1^/10

Malware Config

Signatures

Files

389d03539b882893e9f74ac2c21f8252ff46acfccd8f4634482687b1246a6211
.exe windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 989B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ