450e875131486a694c9872649b1de6a0fea4304547e8c2238fafea7b2af86fb7 | Triage

Sharing

General

Target

450e875131486a694c9872649b1de6a0fea4304547e8c2238fafea7b2af86fb7
Size

2.0MB
MD5

9a8acb498a1f1672e18481ccf6db6cc0
SHA1

6640c8ab4abbfe48fb2f67af919120fdb952a3b5
SHA256

450e875131486a694c9872649b1de6a0fea4304547e8c2238fafea7b2af86fb7
SHA512

2059b3482171f93bce8ae3243b178ce36517aa7804e5161e57aeb5dc7fe3764ed311b9e5e51a10edaf5c3c643db98ee97cced324a9fd9cabf08c1d1566e31860
SSDEEP

24576:nUf5sknxaPeDJXXVr6fqkWj9FYnvHmerRW6RGieK8PEMoXsQnBXrP3I2IvrrP3b9:nUA0J1HiHg6RUFEMusQn5r422rTm2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450e875131486a694c9872649b1de6a0fea4304547e8c2238fafea7b2af86fb7

Files

450e875131486a694c9872649b1de6a0fea4304547e8c2238fafea7b2af86fb7
.exe windows:4 windows x86

b5cbf950d7004d3d65fa62b962588430

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateToolhelp32Snapshot
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA
WriteFile
GetStdHandle
DeleteFileA
CreateFileA
ReadConsoleA
ReadFile
GetFileSize
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

user32

GetMessageA
FindWindowA
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetOpenA

msvcrt

strstr
_getch
malloc
realloc
strchr
rand
srand
_ftol
atoi
sprintf
free

shlwapi

PathFileExistsA

oleaut32

VariantTimeToSystemTime

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ