d0157aa1316c9b772545b8f469eafc0b | Triage

Sharing

General

Target

d0157aa1316c9b772545b8f469eafc0b
Size

11KB
MD5

d0157aa1316c9b772545b8f469eafc0b
SHA1

3eb26ac22470678ef9f0250e02691641a012d571
SHA256

e37615f09542956bf3bb227566ae2a01b9aef790af786ac3277cf7845a5dcfdd
SHA512

59a6be74c8b07166958023ee6785283c69b26ab8c9d77c41eb7d192d4498264554c589f787890b904243eb2a6a6e5285388c487045b5dbf8852cee666b2394ba
SSDEEP

96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MIefyVnfYC2gLSw:XiQC3oSWdHwnzr9V/bpVnAC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0157aa1316c9b772545b8f469eafc0b

Files

d0157aa1316c9b772545b8f469eafc0b
.exe windows:4 windows x86 arch:x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ