991f0c7de3c5fa90a92b62adb8bee28bcfc7e0a383cc02f206898e846c1a80dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

991f0c7de3c5fa90a92b62adb8bee28bcfc7e0a383cc02f206898e846c1a80dc
Size

21KB
MD5

8b681612eb0132679a2b649578d65fbf
SHA1

3f3412577395239ce6253a1a60a70b30340c476b
SHA256

991f0c7de3c5fa90a92b62adb8bee28bcfc7e0a383cc02f206898e846c1a80dc
SHA512

398f81f6f645e99ea3352724e524ef666fabadf57913a31fe32b16431e93d569b6c54de58840a0fe741ceb3f460be71d682c017b6d202bdb786029c90041d617
SSDEEP

384:VcnwR2MxJitq+XOzNt66Vwk9TrVgpYOX1D:AwRo3+nwyKYOlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
991f0c7de3c5fa90a92b62adb8bee28bcfc7e0a383cc02f206898e846c1a80dc

Files

991f0c7de3c5fa90a92b62adb8bee28bcfc7e0a383cc02f206898e846c1a80dc
.exe windows:5 windows x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sxdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ