772c708fdca98a9a52c51d08b9572852847296d7185fdd4fa1c20cbad8c1090f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

772c708fdca98a9a52c51d08b9572852847296d7185fdd4fa1c20cbad8c1090f
Size

6KB
MD5

905e263a55e12565226d0386530a3c04
SHA1

7dba2d0ea6cf49829bb73691adca71971b6151af
SHA256

772c708fdca98a9a52c51d08b9572852847296d7185fdd4fa1c20cbad8c1090f
SHA512

80a61b3d855b5f1c40a920d875e52cfdd9e64348b76c45fcc19151c588c9ee818aa98e77fb1d75cec217c683a6946d3df38d21e4069e6011ddce495968481734
SSDEEP

96:ZXv4mUWKh9ctgC1RSO5nKymV44vYArXKwAWfUjjV9wkp4S+1Z5Wqm:qmUWKs/F5nKfzvzrXnh6fwQ4XGqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772c708fdca98a9a52c51d08b9572852847296d7185fdd4fa1c20cbad8c1090f

Files

772c708fdca98a9a52c51d08b9572852847296d7185fdd4fa1c20cbad8c1090f
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ