799e220d5b131b10beaa314314bc69999bf45a6a1e2de08799fee2991243cddc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

799e220d5b131b10beaa314314bc69999bf45a6a1e2de08799fee2991243cddc
Size

4KB
MD5

9f9c0a2d7da444e2b2e037dfa713e9c3
SHA1

81ca563a56569dc6651862d8b7dd290e5ad2332a
SHA256

799e220d5b131b10beaa314314bc69999bf45a6a1e2de08799fee2991243cddc
SHA512

aab36946f285a42f59e23501bb9aa5cf4aff54ef12cf68c08594a124f395dcf63f6e1ebb7255c9e96fa56b78f3cb4c27eb617362c9728fcb73c095d62c193006

Score

1^/10

Malware Config

Signatures

Files

799e220d5b131b10beaa314314bc69999bf45a6a1e2de08799fee2991243cddc
.exe windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 989B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ