57ef412116df891c324f6f14e53997bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ef412116df891c324f6f14e53997bf
Size

5KB
MD5

57ef412116df891c324f6f14e53997bf
SHA1

578f12c6f871566ded72d66ee3e8dedb303853c7
SHA256

2ac204b6ac5a161499b9c4e012b698ee654922e8ad2f764378b518f3c56bd269
SHA512

92ba36505cc969229f7f6ad3f9a80ffa3902f4c8704b0d2ef17f16d7c74a7d2fecf46e89b2050c8d7d8320f9267592f4d96170eb8046a671c688d8c6563165a0
SSDEEP

48:KnCu3ijZZ6b7EH5Fj7XoOT30NlmeZOViQ7e94a1MC7+i7CVNMHcwXDen+TeYQ:WCuhnEHn4OT3ovQ7e94W7+eCLMHTX0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57ef412116df891c324f6f14e53997bf

Files

57ef412116df891c324f6f14e53997bf
.dll windows:4 windows x86 arch:x86

60e632f8573be7e19237d0afff86d7a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
HttpQueryInfoA

user32

wsprintfA

kernel32

lstrlenA
lstrcatA
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
ExitThread
GetFileSize
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GlobalAlloc
RemoveDirectoryA
RtlZeroMemory
Sleep
TerminateProcess
WriteFile

shell32

ShellExecuteA
SHGetSpecialFolderPathA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

Exports

Exports

MsgBox

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ