b9dae7945488627fff6d5fafa38405a0_exe32[.]exe | Triage

Sharing

General

Target

b9dae7945488627fff6d5fafa38405a0_exe32.exe
Size

99KB
MD5

b9dae7945488627fff6d5fafa38405a0
SHA1

6b7d81f10770326b05692a21ffaeb36e52af2f66
SHA256

e48d4b7bb49d617e65910c50d2d4379c921bb81f3198921640582badb40ee311
SHA512

db4451b2d78057c3e8c2be3145ddd320519326c113df539ef8fbb69aaafb7b23764795b8da283b867500641092605d6a123b9aca7e14cc270fd10055730e3ae4
SSDEEP

384:K+Ozz4Pz/uYpzATWZ5YpPaiTzELDr0+BBfBRwotgMqdwoXj+87eu:K+OoP6bIeabzLfnwotBbYsu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dae7945488627fff6d5fafa38405a0_exe32.exe

Files

b9dae7945488627fff6d5fafa38405a0_exe32.exe
.exe windows:5 windows x86

8bacd03bbc7cdff0985aa85f801440c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
Sleep
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.MPRESS1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE