b2fa0ff899f66fdb3b5e2e5ee52b7229a2173c1c18f7abedebb5c0d2fc669ae3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2fa0ff899f66fdb3b5e2e5ee52b7229a2173c1c18f7abedebb5c0d2fc669ae3
Size

16KB
MD5

116d1892c2e1b0965d89b7b1de480c0d
SHA1

2c03bb947b0eddf75efa82fd3512d0fe249b412a
SHA256

b2fa0ff899f66fdb3b5e2e5ee52b7229a2173c1c18f7abedebb5c0d2fc669ae3
SHA512

450383ec05709c91f2515ef1d24d8eb74cd2bc98e59da15eed578244f45fd96f97dd3a19c14977e67b26c8c67eb3bc5ab12222b7484c17ba35837887f2aa8a99
SSDEEP

192:2g+DvnwR27+Dg3kdTF93uN5qFNrxUBmaQvkxl7HNvXblzDTjlEL:2ljnwR2Ox3uNQyBmaQi7HN5z2L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fa0ff899f66fdb3b5e2e5ee52b7229a2173c1c18f7abedebb5c0d2fc669ae3

Files

b2fa0ff899f66fdb3b5e2e5ee52b7229a2173c1c18f7abedebb5c0d2fc669ae3
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ