b62139a6173c3492b4cef1570ea17d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b62139a6173c3492b4cef1570ea17d8f
Size

9KB
MD5

b62139a6173c3492b4cef1570ea17d8f
SHA1

7a5cb8cf87245b5fe58322ea326f2b0fef5eeac9
SHA256

06c56274fc1db5ddff596e3c3ba6e332cdb8f2329e295b1515bcc1f9493464bd
SHA512

32e6a792f71eaee31ba4e4f02b0079438fcc547530ca6c45142090d5880e065ad39285da3a7e67a4b18bba898373ac2383b434648445457b890860192bef6d4f
SSDEEP

192:ih1u/Os1q4gZe0KxfSEn+S5cPj4wMuP1oynOy:L0KZSy+1swMY1Ey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b62139a6173c3492b4cef1570ea17d8f

Files

b62139a6173c3492b4cef1570ea17d8f
.exe windows:4 windows x86 arch:x86

e78eab4985965e46cae096eee6530936

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
_stricmp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle

kernel32

Sleep
WriteFile
CloseHandle
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
ReadFile
GetFileSize
GetModuleHandleA
GetStartupInfoA
CreateFileA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE