00c96f529f307ac07132c3038502db53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00c96f529f307ac07132c3038502db53
Size

10KB
MD5

00c96f529f307ac07132c3038502db53
SHA1

a984c51643a383d7b50d0048fcb4c612f5b0363d
SHA256

2d092ee554b36f9e4562b984d56545ab263b03d8bd211c7204aecf1761d2ad2f
SHA512

ff8b92475568528fd749bba1a3867013ded77b3aa8f5cd5b79f69e71710c088e433c56b12537dc80e18fc01b23c3f98560cc455fdcb0c9ab7ffa5005dfdfbb84
SSDEEP

192:8qQKMmooyD9xWoaH8fqXWXnMMLvnYz44hrh9h7evjXmLhhhhhhhhhhhhhhhhhhhv:17sND9gwqmXnpLvLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c96f529f307ac07132c3038502db53

Files

00c96f529f307ac07132c3038502db53
.exe windows:1 windows x86 arch:x86

3a4e70ee7daca1d75da08c4e4f191766

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpRenameFileA
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpPutFileA

user32

AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint

kernel32

CloseHandle
ExitProcess
TerminateProcess
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE