f93455686c5c6641ebf25090cdc58720_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f93455686c5c6641ebf25090cdc58720_exe32.exe
Size

13KB
MD5

f93455686c5c6641ebf25090cdc58720
SHA1

906f9e25d0475044fe11c8f71ad9411a7aeaa62b
SHA256

a5f655ca4c6164a80e16fab671fadba7c81d6a3497ff173cd115de896d6d9d4f
SHA512

313c08ec96cecc5709dd8332d7b64fce5710e9387549d68a2462ae523f451e9c4d6528f75da8ebece3a3f94bcac4225565fde0521000c0315b6ce0c7ecda7964
SSDEEP

192:qof0vnwR2hBA4L1R66jmVb2UsFwCx8npV11WLrbZkWa2PZ9G:1wnwR2hBjjm8UsFwCs1grNHPzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f93455686c5c6641ebf25090cdc58720_exe32.exe

Files

f93455686c5c6641ebf25090cdc58720_exe32.exe
.exe windows:5 windows x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ