691a2736dcc1870863bf3a973d4dd5a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

691a2736dcc1870863bf3a973d4dd5a8
Size

44KB
MD5

691a2736dcc1870863bf3a973d4dd5a8
SHA1

235bc9c94add2cb83cc921b2ca4f3b41649901cf
SHA256

a123e3a8ac688d2a78cdcc90e61670425f50fe4860a8783906158cc7733d09b5
SHA512

3fdf6919e65b70aed41310d32824c5a161024e369f837f265263919a2ed61fc2041dba27c85b20eccd249d9496531cf21ed3eeed06e20d78f704cf71a0e1989f
SSDEEP

192:Et89SA13oEWYDv1RWhvRTNP1oynspAsG73W333333333333333333333333W333l:Eu8yxVDNRWhvRT512p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691a2736dcc1870863bf3a973d4dd5a8

Files

691a2736dcc1870863bf3a973d4dd5a8
.exe windows:5 windows x86 arch:x86

04f08457c39fc22d5e89e98d5a00cbdf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenUrlW
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetOpenW

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
memset
_except_handler3
_controlfp
srand
rand
strchr
_snwprintf
_initterm
__set_app_type

kernel32

GetLastError
GetStartupInfoA
GetModuleHandleA
ExpandEnvironmentStringsW
DeleteFileW
CloseHandle
Sleep
WriteFile
GetTickCount
CreateProcessW
CreateFileW

shell32

ShellExecuteW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ