674894ff94de2bd8034670eaa8ec1910 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

674894ff94de2bd8034670eaa8ec1910
Size

220KB
MD5

674894ff94de2bd8034670eaa8ec1910
SHA1

4ae57e19df92cff6a82e1f3b007729a5bc0f90d7
SHA256

e4fa3c51df67c3384d43f927d91130415b930c5451e69358ce10ca067f5824c7
SHA512

75b6fc7a87ee40cadbadbbdc6b5390e484b954a547ee8b1d6bc7adb1ca92b81151c7a3755f0242867f4b71d6a19e4f842f99e2bf1cf918ebe5ec1c8d952b84b4
SSDEEP

3072:NrWMWXPUmWgIwHs1YyJs5lTwOfvgTVDpXap6wko:N6X9WgpHs1+nTDwlIsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674894ff94de2bd8034670eaa8ec1910

Files

674894ff94de2bd8034670eaa8ec1910
.exe windows:4 windows x86 arch:x86

8622e6ab149477c8ade100ec62997911

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
LZRead
SetConsoleMenuClose
CreateNamedPipeA
FlushConsoleInputBuffer
IsValidLocale
RaiseException
GetLocaleInfoA
FindFirstVolumeMountPointA
GetSystemWindowsDirectoryA
UpdateResourceA
EnumUILanguagesA
GetDateFormatA
GetVersionExA
GetConsoleCursorInfo
ResetEvent
GetProcessShutdownParameters
EnumResourceTypesA
FindFirstFileExW
GetFileAttributesExA
GetSystemDirectoryA
SetEvent
GetConsoleAliasesA
QueryPerformanceCounter
VirtualAlloc
GetModuleHandleA
GetProcessHeaps
GetProcessHeap
RemoveDirectoryA

gdi32

SetViewportOrgEx

wininet

FtpRemoveDirectoryW
ResumeSuspendedDownload
InternetCrackUrlA
InternetQueryDataAvailable
InternetUnlockRequestFile
InternetGetConnectedStateExA
FtpSetCurrentDirectoryW

Sections

INIT
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 208KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ