169845544b8acd6297f993effdf1cf98 | Triage

Sharing

General

Target

169845544b8acd6297f993effdf1cf98
Size

8KB
MD5

169845544b8acd6297f993effdf1cf98
SHA1

a5a3231480f5ea47ecd62130fbac0597254033fb
SHA256

0184f34e1785314934d877ed62e2470abdad4dea61315c420594afbcb637078a
SHA512

df96d32a9009dc7821ba09d96423d49ce5124f2e8273907d1f4d618141ed7694d0f27b9b534366de7052257dff273d890d2a5b3cc47acde245417f10b850ff51
SSDEEP

192:ijmfGTs84FsMiClnWQ30Rx4afP1oy3Zt3:KApF9i2ndm4G15Zt3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169845544b8acd6297f993effdf1cf98

Files

169845544b8acd6297f993effdf1cf98
.exe windows:4 windows x86 arch:x86

2957bfc3b0848f2ad1cde8965bf81715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
GetModuleFileNameA
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
GetFileSize
ReadFile
SetFilePointer
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GetPrivateProfileStringA
Sleep
LoadLibraryA
GetProcAddress
GetTickCount
CreateThread
GetFileAttributesA
lstrcmpiA
GetStartupInfoA

user32

ShowWindow
GetWindowLongA
FindWindowA
wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

_itoa
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
strncpy
malloc
atoi
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE