InfoTask[.]exe | Triage

Sharing

General

Target

InfoTask.exe
Size

43KB
MD5

f551d72a018aec6a8aef6f3158440bb4
SHA1

3de9cb16fc7165823b5730a41ce460ba47fcb38a
SHA256

0fa1c656e3e8354c7cd8c54ab68b69132efab6e28946fbfc24344084bc0d7bf4
SHA512

4df6bc84046fda67ac5ec3e2b53cb5f5f0aa7387e229311af5e8663cc6d6e35e06a226fe310735d03e29889190e91e089ff303b5de2276e847a6dcdb3164f124
SSDEEP

768:WYUmrtUEE7+2oc5bk4vXbGON2Syrrm261oR/4cbiP:WYHtUEuJr5bR3Nsrrt6mR/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InfoTask.exe

Files

InfoTask.exe
.exe windows:4 windows x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

�
Size: 21KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r��
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE