aad4cbcbe14f9fa3af2a2236af76360a | Triage

Sharing

General

Target

aad4cbcbe14f9fa3af2a2236af76360a
Size

23KB
MD5

aad4cbcbe14f9fa3af2a2236af76360a
SHA1

3abda8339b171e3fc7a1d287846b9ce8281063d8
SHA256

3a82f074f584d169d59df209e62c0a5e5e7432f52f9d209784fe160c104a552d
SHA512

27249eb1e93e96cf1b407e3a12aaa5586efc9de605f89eebbeb191fac635802c1c6ef2922bc28f3c822d708cbf4d77a98f9055fe2a261e093085fec8e007b568
SSDEEP

384:euAxTcEggKljVPFrIA++B135RizUBYkkjuv1hkNLdbaLa4CwUJuUCSFCJWe8EDEh:B8VokA++/3iIBxkjuv7wbaLa4PU48IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad4cbcbe14f9fa3af2a2236af76360a

Files

aad4cbcbe14f9fa3af2a2236af76360a
.exe windows:4 windows x86 arch:x86

17e52d902f250f084e78c7fb748afcf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
WinExec
GetModuleFileNameA
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
GetFileSize
ReadFile
SetFilePointer
Process32First
GetModuleHandleA
TerminateProcess
OpenProcess
CopyFileA
DeleteFileA
GetTempFileNameA
GetPrivateProfileStringA
GetTempPathA
Sleep
GetTickCount
GetFileAttributesA
lstrcmpiA
CreateThread
GetStartupInfoA
Process32Next
CloseHandle
GetSystemDirectoryA

user32

wsprintfA
ShowWindow
FindWindowA
GetWindowLongA

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
strncpy
malloc
sprintf
atol
_stricmp
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE