506f3029db662930a11c16c90bff8df6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

506f3029db662930a11c16c90bff8df6
Size

23KB
MD5

506f3029db662930a11c16c90bff8df6
SHA1

725d73da3b8425a3d3e93780709c44afceb93f1b
SHA256

516f9df4da994a998d309a6e2960afe06ecf637952dfb57b396c27985024b540
SHA512

bfab68e50d619f82d74c6ad79707caefc0a18559b72ba38e41bc6de8f2a4dfb6508c8e19453d6f6adedb3f8b368df54d535a84c250c3138bc0316eae0322c730
SSDEEP

384:M2FWcqNVUt7a/tjeZnzMRtMUcK4DpbC1Y:MbLNV+7agnzMRRcFDp21Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506f3029db662930a11c16c90bff8df6

Files

506f3029db662930a11c16c90bff8df6
.exe windows:4 windows x86 arch:x86

933125681a259d4ce44b17b5ef69f4a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GlobalAlloc
GlobalFree
DeleteFileA
GlobalUnlock
ReadFile
SetFilePointer
WinExec
CreateFileA
lstrcatA
lstrcpyA
lstrlenA
CloseHandle
GlobalLock
WriteFile

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

wininet

FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntryA

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE