02ff90fe28846ca84eecf7a3a83637d9 | Triage

Sharing

General

Target

02ff90fe28846ca84eecf7a3a83637d9
Size

21KB
MD5

02ff90fe28846ca84eecf7a3a83637d9
SHA1

053aaa3b66cf9ca4d28fde8bc878d93f13465bbd
SHA256

6cfdddb8e0e214445b609f256ea6f0b89012550c7bc22beab9f9728b5f1860d2
SHA512

e65625ba01498943d013efc9baf190342d5bef9fa39738745de68f65fff0ccd58a3bfa55551940b60bd6d071da1397567bfd5270f4a8754f6396fd1de8cb5e2e
SSDEEP

384:uFakaDgVHC9WZJJXQYg3UnAi9D0o7DOYJU0XWw9Lo:uFaraHC6JAYNAyt3RaIWw9Lo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02ff90fe28846ca84eecf7a3a83637d9

Files

02ff90fe28846ca84eecf7a3a83637d9
.exe windows:4 windows x86 arch:x86

39f43a83cde8674b9fe64a9cfdd03553

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strstr
strchr
atoi
strncpy
RtlRandom
sprintf
memset
_chkstk

kernel32

GetLastError
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
CreateFileA
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
VirtualFree
GetWindowsDirectoryA
WriteFile
Sleep
TerminateProcess
ReadFile
GetSystemDirectoryA
GetTimeZoneInformation
SetCurrentDirectoryA
VirtualAlloc
GetProcAddress

wininet

InternetConnectA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE