1aa23f49b204b44de208d5d050b7386fee984360f6df993093f5f51201843d6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aa23f49b204b44de208d5d050b7386fee984360f6df993093f5f51201843d6e
Size

2.0MB
MD5

c4d8b7cff8969d15fc12907998d035a0
SHA1

60628438ff531b9fc22852b0096adfbfd074fb53
SHA256

1aa23f49b204b44de208d5d050b7386fee984360f6df993093f5f51201843d6e
SHA512

33af46f8ee3b1360ff702ec548acd1f02e64507feff95fe0bde3acbb178158b349ed6e74456e594cdd6789414aa537f075f56785155b4e26f1b9e3549e528da1
SSDEEP

24576:psG5sknxaPeDJXXVr6fqkWj9FYnvHmerRW6RGieK8PEMoXsQnBXrP3I2IvrrP3bn:psV0J1HiHg6RUFEMusQn5r422rTm2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aa23f49b204b44de208d5d050b7386fee984360f6df993093f5f51201843d6e

Files

1aa23f49b204b44de208d5d050b7386fee984360f6df993093f5f51201843d6e
.exe windows:4 windows x86

b5cbf950d7004d3d65fa62b962588430

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateToolhelp32Snapshot
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA
WriteFile
GetStdHandle
DeleteFileA
CreateFileA
ReadConsoleA
ReadFile
GetFileSize
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

user32

GetMessageA
FindWindowA
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetOpenA

msvcrt

strstr
_getch
malloc
realloc
strchr
rand
srand
_ftol
atoi
sprintf
free

shlwapi

PathFileExistsA

oleaut32

VariantTimeToSystemTime

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ