HD_[.]_cache_HD_start_file_download[.]exe | Triage

Sharing

General

Target

HD_._cache_HD_start_file_download.exe
Size

889KB
MD5

e875a237d6a68cf4f0c6becaae181756
SHA1

170dde378e497e4743fa0980bfc0a7439b46c16d
SHA256

c89085680b0eea443bef95035d09f57e1bbe9a5090387dd08a5dc22b8fd73162
SHA512

c1ca9f876bf766ea6493282340313c22337872b375aae51c61cea02c06a317174e9f7a70c3822ada766460797ab57ed6dc98bec029bde5c6eafa1f57e1f42c2d
SSDEEP

24576:SwpQ3reAjDaoQ/XWA/B0jKeaOhELnAEntX43+pAfjFH/:rEvaoQ/Xn/Gj1qnrntX4AKhH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HD_._cache_HD_start_file_download.exe

Files

HD_._cache_HD_start_file_download.exe
.exe windows x86

320ffb3ead7d13ea9d4a4b7814c6523f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

Sections

.text
Size: 74KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ