75f42194dc7f2be4e59c866538f9a3dc | Triage

Sharing

General

Target

75f42194dc7f2be4e59c866538f9a3dc
Size

12KB
MD5

75f42194dc7f2be4e59c866538f9a3dc
SHA1

6196361207bd08991a5bcbac5f7a43dbb1cfc6ff
SHA256

7f149b041b08221b3ad9ef639f213b295e9495c4b891fdd962d4cdabf9c59d74
SHA512

85f589e4d29e25d41ec16b0ac01f968e76b98a9db418b0922a613e6117e945b8a4e7b19fd74d306ba9b21f9fdc25da3f419a6f25c811d378b88e14df575f4a7c
SSDEEP

192:jUgxGh/FZvFttNzuC18Ydxw+yvHDrl7zK0klh/3yrUN2kNwbTvxWhVY:jU9dXsC7Q+yvXk3PyAolTvgVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample

Files

75f42194dc7f2be4e59c866538f9a3dc
.gz
sample
.exe windows:4 windows x86 arch:x86

db85b653e9a09da8366f5c18eea92ece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_adjust_fdiv
__p___initenv
_XcptFilter
_initterm
__setusermatherr
__p__commode
_controlfp
__p__fmode
sprintf
__set_app_type
_except_handler3
_exit
strcmp
strlen
strncmp
exit
atol

msvcirt

?cerr@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@K@Z
??6ostream@@QAEAAV0@PBD@Z
?cout@@3Vostream_withassign@@A
?flush@ostream@@QAEAAV1@XZ

kernel32

GetLastError
GetConsoleCP
FormatMessageA

user32

GetDesktopWindow

wininet

InternetCloseHandle
InternetErrorDlg
InternetReadFile
HttpSendRequestA
HttpQueryInfoA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetOptionExA
InternetConnectA
InternetOpenA
InternetCrackUrlA

Exports

Exports

?VexeVersion@@YAPADXZ

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE