c04ac9b62bbca63a2b5cc780f3acaa5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04ac9b62bbca63a2b5cc780f3acaa5e
Size

165KB
MD5

c04ac9b62bbca63a2b5cc780f3acaa5e
SHA1

dc49aad9b498bc11e16518438613dcad908a11d0
SHA256

376227f45dd87fbb3eefd7e7521ef200046678c5be72c436dcc68982be484193
SHA512

b26d446466b8566456673b0a2d6c3d0d251f0cf18cc3282437d18b398612f71038b6461466653ceff3dcc6ab540d1454cc335c3e61fd85895c2cc00d3efa1e7f
SSDEEP

3072:YBgF0UMpNnvq36lQSN+fp8vwfw2KXoS00e4Rld9xowduXbaTQ+mpDKO9dakDJy8C:YBgF0YSYpKyw2L/0eo2wloDakDJy4To

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04ac9b62bbca63a2b5cc780f3acaa5e

Files

c04ac9b62bbca63a2b5cc780f3acaa5e
.exe windows:4 windows x86 arch:x86

f6e9f842ad3d764ea0e45106a86af42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE