222acc8b505cb1f9d06d39df0b66ba3336384e9883f33884259c7c16b8ef8d51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222acc8b505cb1f9d06d39df0b66ba3336384e9883f33884259c7c16b8ef8d51
Size

8KB
MD5

72270485c0f4d3d77c808c7bf52ae757
SHA1

cb9e2592f611baf2abd14f8778ebc4c06bb394b9
SHA256

222acc8b505cb1f9d06d39df0b66ba3336384e9883f33884259c7c16b8ef8d51
SHA512

21a829c85de1eb45874566d4cc2972ad747747086f29c8939e38d87a62268d696e6b6e13229e402f87283dcfda66b8240f6a98b160cc0255ffb8078eda4c0263
SSDEEP

96:Zcuv4mcWKh96tgC3ReanKymV44FUmcfF+lxTcYx/W8uGkOc19F86gaba:GtmcWKG93nKfzum8axTcYx/W8uGkOcNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222acc8b505cb1f9d06d39df0b66ba3336384e9883f33884259c7c16b8ef8d51

Files

222acc8b505cb1f9d06d39df0b66ba3336384e9883f33884259c7c16b8ef8d51
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 991B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ