144fcd4a56f015f58d8c90de29db3c38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

144fcd4a56f015f58d8c90de29db3c38
Size

71KB
MD5

144fcd4a56f015f58d8c90de29db3c38
SHA1

d12097b5cdaee126767a01cef2e9a97f001cbba8
SHA256

20d1041926193818d78a93b9f8c6ebd925baf2fb95838a06f6d939eb62e7ca2a
SHA512

9643e980ec2c250a8f79acd2c83cdca02242f0ecdd171c931ebea4d7700f3d4202276196b1a71d2c4a4a814dc048bfe027839ad94e18eb50e4ee48e496bdadd8
SSDEEP

48:ii1XiK+HDqvHoLVC5+eH0wggCvfG8bvqex5cA0BcifLUe:zrkDoHL5+eHPggCvfNvqeHh0vfLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
144fcd4a56f015f58d8c90de29db3c38

Files

144fcd4a56f015f58d8c90de29db3c38
.exe windows:4 windows x86 arch:x86

9ac3d4f654f2f13f7e0e587e644ecc1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetPrivateProfileStringA
SetErrorMode
lstrlenA
WritePrivateProfileStringA
GetTickCount
lstrcpyA
Sleep
lstrcatA

user32

wsprintfA

advapi32

RegSetValueExA
RegCloseKey
GetUserNameA
RegCreateKeyA
RegOpenKeyExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE