04a50eeda9ab26bf35ef2ae7463b7c36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a50eeda9ab26bf35ef2ae7463b7c36
Size

27KB
MD5

04a50eeda9ab26bf35ef2ae7463b7c36
SHA1

eaae5cda59eaf502bc2a19f5f6c9d294f4120a49
SHA256

260348c38676acd726208b50d071563c02ee9cc31d4e95db2623c408b2d36a23
SHA512

b0fc47f9629d0bce9dc1dfe24a3c2266ab088eb1f1947af958684562e6a8a8a109d7ca72cc436eb5957364fdfca835397155d0d74c4af24f085dbf1412fcb122
SSDEEP

768:aMmOv9AHdCsrIKA/lGK+cZahN/ez+pq7GM:aM7v9cJA/MRpVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a50eeda9ab26bf35ef2ae7463b7c36

Files

04a50eeda9ab26bf35ef2ae7463b7c36
.exe windows:4 windows x86 arch:x86

abc104260e38ecd0190fdbd563b63a2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
GetModuleFileNameA
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
GetFileSize
ReadFile
SetFilePointer
GetModuleHandleA
TerminateProcess
OpenProcess
CopyFileA
DeleteFileA
GetTempFileNameA
GetPrivateProfileStringA
GetTempPathA
Sleep
GetTickCount
CreateThread
GetFileAttributesA
lstrcmpiA
GetStartupInfoA

user32

wsprintfA
ShowWindow
GetWindowLongA
FindWindowA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
strncpy
malloc
atol
_stricmp
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE