67cbd5bbeec848bd8d16e1cb92e3b494 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67cbd5bbeec848bd8d16e1cb92e3b494
Size

48KB
MD5

67cbd5bbeec848bd8d16e1cb92e3b494
SHA1

03daef7a7d66fc3656473ce637459fad435036ab
SHA256

2b745d7f92b23ba347c00065b7add7ee615746249bc2c7ca20a7626c08437070
SHA512

d8b08b3814c10c0f3988dcf6e30d0e8de1e910a210147071075cd513aed7ec7c050390b95f8a12e0d1877ce66277058eae1f5110b96d49ada3a7d96f971a5a86
SSDEEP

768:9TuXIEyrhGx4XTvvQhRjbacva8T8OhfGGfcGfNGfLatXIJtXIttXIEKtXatXMtXL:9DEGoxmLQ/PacXuGkGVGjMYErNE3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67cbd5bbeec848bd8d16e1cb92e3b494

Files

67cbd5bbeec848bd8d16e1cb92e3b494
.exe windows:4 windows x86 arch:x86

1e36d3b8ba9ab0423be77597ea15d665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
HeapFree
CreateThread
HeapAlloc
ExitProcess
WriteFile
CloseHandle
CreateFileA
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
Sleep
FreeLibrary
DeleteFileA
MoveFileExA
GetWindowsDirectoryA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
ReadFile
GetTickCount
lstrcpyA
GetComputerNameA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

ws2_32

setsockopt
htons
send
inet_ntoa
ntohl
closesocket
recv
connect
htonl
bind
socket
WSAStartup

user32

wsprintfA

advapi32

ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shlwapi

SHSetValueA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE