download[.]exe_ | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.exe_
Size

1002KB
MD5

69363d8ce54fa14380b4868d0cc2429e
SHA1

9cb0988a1ae54eaf4055e78ad7a51e59d289c3e0
SHA256

8a2661f69ca81b5a6ecc15809c063eeed310f5f33fd6ef24fc884afb49b944bb
SHA512

b5dad912f5806b034f9b0351ad5f781d6c2977fcae8a300434a454349cce988b12525ea867f9d32b8de91c38cf605a213b70398668bda758ff7d752a1f73749f
SSDEEP

24576:kcDhKje1OG3PqQ2GaogMo8Wo7UvTXENm4AVJ9:kcD1OG3iQ8oWo7wZJ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe_

Files

download.exe_
.dll windows:6 windows x86

8e7f2c927c82d7f14c70fac8e5a0a352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SleepConditionVariableSRW

user32

MessageBoxW

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoTaskMemFree

wininet

HttpSendRequestA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 998KB - Virtual size: 998KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ