58b5f3ad414be95bab101a3bbb666ec9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58b5f3ad414be95bab101a3bbb666ec9
Size

80KB
MD5

58b5f3ad414be95bab101a3bbb666ec9
SHA1

57f90cf0e810b70b471cd57cde4e4f863fb96779
SHA256

d35a5ab5a71c7d097935829f7fd547cc22db3e7946194f7399e29a225db971f5
SHA512

51c9e7cf5233fc04e971a602353d9439713e016872a145ba4c1c305379324c84bff0c7efe3430a34f113654acb65a967cb7eeb66266a5d2a875b42e9a2a8f08c
SSDEEP

1536:KtV7UXZfkvaji+GgcBOOVNjQk3t4HsuC/SHnabuPaEPbESzg:KtV7UXZcvaybOyNcm2HZWSHabuSE3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58b5f3ad414be95bab101a3bbb666ec9

Files

58b5f3ad414be95bab101a3bbb666ec9
.exe windows:4 windows x86 arch:x86

1b61701535a38321f2221402daed26e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

fgetc

kernel32

CopyFileA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

GetTokenInformation

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

Sections

.text
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bad0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.bad1
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ