5278001a8c136a4a962dae15f677bd91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5278001a8c136a4a962dae15f677bd91
Size

560KB
MD5

5278001a8c136a4a962dae15f677bd91
SHA1

056d52195dd7bf2d9f87723ff7871127053abed7
SHA256

cf218265b3b461ade85d6b7528ce6ab9fbf3bcc211db268d3a755be11f6acb5b
SHA512

ffb2ffe641d2bffb7bea13430660f26f205f944224241c7b838264120bf9e2e36ca6a1339c1ec8c4a7d7dac2fb963c3f6d1930b3c9c482c8d0db36b45bbd3723
SSDEEP

12288:b1DYr2oTZL3NszxmfFuE1SkBJc9en/0Q8HrWq3iE0iTu:bdYCUZL3C8fQE1xQe/T+rWSB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5278001a8c136a4a962dae15f677bd91

Files

5278001a8c136a4a962dae15f677bd91
.exe windows:1 windows x86 arch:x86

eaf7c7d778b427cc143d8eb209c5f6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FormatMessageA
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersion
GetWindowsDirectoryA
LocalFree
MapViewOfFile
MoveFileExA
RtlMoveMemory
Sleep
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA

user32

MessageBoxA
wsprintfA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 921B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ