334722fd9ef91c6ae34a5647fb9451cb873f83b28ec7a6943d8012620f51b8d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334722fd9ef91c6ae34a5647fb9451cb873f83b28ec7a6943d8012620f51b8d2
Size

108KB
MD5

690a322c9b01ed8dd8842b3e7f99f9b1
SHA1

a3606727b16847a62895ee04e1f7234cf914ab98
SHA256

334722fd9ef91c6ae34a5647fb9451cb873f83b28ec7a6943d8012620f51b8d2
SHA512

de5f8127b322cb0727c1ffa8dfcfa763a373fd0efc6fa19c48c5a81a017987bcf402f29a5d3bf61d2de945f0329121733815daf2e7225d56825cf740a214aede
SSDEEP

384:vVf8XTIq01kYJJJbub4On4LRzV5Ct/1E:vBCIq01khbbCjC3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334722fd9ef91c6ae34a5647fb9451cb873f83b28ec7a6943d8012620f51b8d2

Files

334722fd9ef91c6ae34a5647fb9451cb873f83b28ec7a6943d8012620f51b8d2
.exe windows x64

f20b34ab44cf463fc5418196d1f3b998

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA

crypt32

CryptStringToBinaryA

kernel32

GetProcessHeap
VirtualProtect
HeapAlloc

user32

MessageBoxA

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

Sections

.text
Size: 1024B - Virtual size: 835B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ