10b8f73b58c1c9c1a39010d935d749fa | Triage

Sharing

General

Target

10b8f73b58c1c9c1a39010d935d749fa
Size

13KB
MD5

10b8f73b58c1c9c1a39010d935d749fa
SHA1

520536eeaba50fdc3f824a5a1b980ec178c14157
SHA256

09cab038c944f551b4ce5f927004782afaebd1c7df5c9178a748644807aeb2cd
SHA512

27344b88a74ebaac632d23e1ea6a8b4039dc05110bc4cb2699888e28f4ebdf649166d746350e6d28986199e1a27752403bdbc117bb5753b165165ab2d6483682
SSDEEP

96:b6lCiCQn1wLGzMh1RcOAC34t1XjHG7eHbHKQDGjL+:mlCv81wLGzkACot1MsbHKQDGj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10b8f73b58c1c9c1a39010d935d749fa

Files

10b8f73b58c1c9c1a39010d935d749fa
.exe windows:4 windows x86 arch:x86

23d45f63ce1d610333ea3a62d7ce8fba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleFileNameA
Sleep
GetSystemTime
GetModuleHandleA
ExitProcess
DeleteFileA
CreateFileA
WriteFile
SystemTimeToFileTime
CloseHandle

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegSetValueA

shell32

ShellExecuteEx

user32

LoadIconA
TranslateMessage
SetTimer
PostQuitMessage
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
KillTimer
LoadCursorA
RegisterClassExA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rebld_i
Size: 912B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE