b4c6f9388fef64477d9c05163a1bed97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c6f9388fef64477d9c05163a1bed97
Size

329KB
MD5

b4c6f9388fef64477d9c05163a1bed97
SHA1

5e547b17c804dbfb0b031c6bbb67a2aac257adcd
SHA256

5fb0e911d0e9471a28e217c6df0ae5d2fdff24d598da06269dff65754d111b20
SHA512

79c8639be88557400c53c99156337f3337adbcc632ebac0986253260ab572927a2690d0c49067552ca3def90046eafd3c614a03606e0ea1d8535422c6a4adfd9
SSDEEP

24:eFGSWDvWKE/teM5SP4196B1NaiW7lC3SazbwJPnRuV4MPgicmHN:iWbWKUR5SP8q1YiW74CazbwdRuqSFt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c6f9388fef64477d9c05163a1bed97

Files

b4c6f9388fef64477d9c05163a1bed97
.exe windows:6 windows x86 arch:x86

3b5c5e55e7c6aa5b91f1326decade5f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\work\syc\payload\shellcode\Debug\shellcode.pdb

Imports

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetOpenA

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 695B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 207B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ