196306636746cc006cf965296c7dc192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

196306636746cc006cf965296c7dc192
Size

82KB
MD5

196306636746cc006cf965296c7dc192
SHA1

c069ca9e9392eeda2b1983e3aac697defbe827a0
SHA256

cb7a4147efeb88adb70610181de2d5daeb142e48debed7e5eead6ab6beb28fc9
SHA512

f490e1ae211209a1c3a52f6664191d3e91d6680ad7bbaa436bb3da67919361fb7e8ca9edeb377cae2cc632150e3a3548cb229fa59982ee2e43536029f819a64d
SSDEEP

1536:uxTnMwOnbNQKLjWDyy1o5I0pJUEbooPRrKKRSqBXPE:RNQKPWDyDI0pJltZrpRS0Xs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
196306636746cc006cf965296c7dc192

Files

196306636746cc006cf965296c7dc192
.exe windows:1 windows x86 arch:x86

eaf7c7d778b427cc143d8eb209c5f6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FormatMessageA
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersion
GetWindowsDirectoryA
LocalFree
MapViewOfFile
MoveFileExA
RtlMoveMemory
Sleep
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA

user32

MessageBoxA
wsprintfA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ