4c04fc69edb16a6b1134b61d0ecc721c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c04fc69edb16a6b1134b61d0ecc721c
Size

8KB
MD5

4c04fc69edb16a6b1134b61d0ecc721c
SHA1

ea353388a5009bb5b8c1b80d9a9a00c8f6a7c972
SHA256

704cfecba8c620634b68b268e8ff32c1b6e8ce4fced8d5e11fe94ff957d1de5d
SHA512

3f2dc0d67283a293a6009c6ee3d0b692d55f1c81c326e02102aaebf17465b87e61bee33f4fd1a639ef34e9bb6af2a73c3fd25822b7fe4b6a9e7ab82d20b8f531
SSDEEP

96:Z1QOU2BNOvbCh8KkGWBCC811Cn6EqrdmuyqUIYksFHyqhuFO:+pTCh8CwCC8/RdBJWFHyguF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c04fc69edb16a6b1134b61d0ecc721c

Files

4c04fc69edb16a6b1134b61d0ecc721c
.exe windows:1 windows x86 arch:x86

65c1c0703587a707ead5f7c0582edc2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcpynA
lstrcatA
lstrcmpA
lstrlenA
GetTickCount
Sleep
CreateFileA
WriteFile
CloseHandle
CreateProcessA
CreateThread
GetExitCodeThread
TerminateThread
GetSystemDirectoryA
ExitProcess

ws2_32

WSAStartup
socket
inet_addr
htons
connect
recv
send
WSACleanup

user32

CharLowerBuffA
MessageBoxA
GetAsyncKeyState

advapi32

GetUserNameA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE