3af1f8fc656b60d5d1b142682570501d | Triage

Sharing

General

Target

3af1f8fc656b60d5d1b142682570501d
Size

14KB
MD5

3af1f8fc656b60d5d1b142682570501d
SHA1

63dcde783647dc6cb772bad1b38fcbef2db95818
SHA256

3892cb17e8e887e606feb92e570880e577d5b7c0390ac3221ee16d7a28618c03
SHA512

bc50f6bf0ec5155318083359a40ad71d6a22b8df367723ddfae7acdb1008822a381233d27ba1e46d2a4d9438902e2e0f397e23984709e9ccf575f1bb96abdd6a
SSDEEP

192:kt9Lm60a9+xIB7vuwvXP1oynh/eyTlAuFCJnjFBOa:ktY60a9+xAnv/1HaNn2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af1f8fc656b60d5d1b142682570501d

Files

3af1f8fc656b60d5d1b142682570501d
.exe windows:4 windows x86 arch:x86

3f5e32ac1549a3de5ba692a0b5218af0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
lstrlenA
GetSystemDirectoryA
GetCommandLineA
GetProcAddress
CreateFileA
WriteFile
CloseHandle
LoadLibraryA
CopyFileA
GetStartupInfoA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA

msvcrt

strcmp
strcat
strcpy
fclose
fprintf
fopen
__CxxFrameHandler
_EH_prolog
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_access

mfc42

ord389
ord5207
ord690

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE