996d41693792adfa5c8c049c757f55f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

996d41693792adfa5c8c049c757f55f9
Size

4KB
MD5

996d41693792adfa5c8c049c757f55f9
SHA1

718ae5c012b6d78d8c518e37a1c5a7ee51a2a194
SHA256

29b7ef566b904fea9bdc268410e3b9bbfcab86ad141467339bfb6d513a30025e
SHA512

82dbc8698fec96cc014b1a147124a9a6809f3078e9a1ca79fb99c514ba0b7c40ad834df9dfb283ffffc0d93d784f0ba9840f52928fcfe413ae5dcc8fdd86a483

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
996d41693792adfa5c8c049c757f55f9

Files

996d41693792adfa5c8c049c757f55f9
.exe windows:4 windows x86 arch:x86

80e137dbd57e9295d8184a7d6c03bc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
WriteConsoleA
Sleep
GetLocalTime

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ