44842b87da9e167128de6b0a4e650b4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44842b87da9e167128de6b0a4e650b4b
Size

66KB
MD5

44842b87da9e167128de6b0a4e650b4b
SHA1

1afd485478030ae12b317a83a579170d72bf1fc9
SHA256

96f5148c3d9c300e8eadc03f7a19583686903979b491e069ebc6ebd3d5e42835
SHA512

b7972c5b9055a89b3547dea1661e6546f933f467f8e40362af70a4ab0a5b12fe05f1963e3e47442573398c974252c5bdc1a4b043e09e3824f2edc153df835dbf
SSDEEP

1536:TYj1DOtAxK5aZmhRR1c/No2V6LUOSkzJA:TYjigMem3RfwI5z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44842b87da9e167128de6b0a4e650b4b

Files

44842b87da9e167128de6b0a4e650b4b
.exe windows:4 windows x86 arch:x86

d7849dd320fe2aab7ee12a2d021bcf41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpFindFirstFileA
FtpPutFileW
GopherCreateLocatorW
FtpCreateDirectoryW
CreateUrlCacheContainerA
GopherOpenFileA

urlmon

CreateURLMoniker
URLOpenBlockingStreamA
CoInternetParseUrl
URLOpenBlockingStreamA
UrlMkBuildVersion
CoInternetGetSecurityUrl

user32

DrawIconEx
EnumWindows
DdeNameService
FrameRect

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE