8880b60774a1e9adf1f3af6f1f86856e | Triage

Sharing

General

Target

8880b60774a1e9adf1f3af6f1f86856e
Size

18KB
MD5

8880b60774a1e9adf1f3af6f1f86856e
SHA1

5025af2e411e03ce00ddb9d0eb8fc67557b68ad3
SHA256

e93f068b73a63e59d8828a32e9fb5f5c5d8d3e0972d540a76114bf16ef46f429
SHA512

e9418ef46caef8ade34eb66f04cc216ff467e32a1de114ee1a425ac16ddc83ce274f3a5dfef3be18255c35a6b183a4da26ff4df46a3c5bfccc97750c558af94f
SSDEEP

384:9zGvdiwGQnacva8xxf0ZY/Za/SzY/Za/x:9qvdxnacva8/0r/SV/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8880b60774a1e9adf1f3af6f1f86856e

Files

8880b60774a1e9adf1f3af6f1f86856e
.dll windows:4 windows x86 arch:x86

e6dc8ba12d4674b3d67a2361099563d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
lstrcat
lstrcpy
lstrlen
CreateDirectoryA
GetWindowsDirectoryA
CreateFileA
WriteFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
ReadFile

wininet

HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA

user32

wsprintfA

Exports

Exports

f

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 544B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ