c15a2b179c6df74c183bc18132d0fbea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15a2b179c6df74c183bc18132d0fbea
Size

416KB
MD5

c15a2b179c6df74c183bc18132d0fbea
SHA1

3b4ecfbff6a7ec3da2e259954db769c3f47f5004
SHA256

dd986a4a0be4d1c5b64067a3822bfb66884fcd64bd7f86d08d4896e8b3d27776
SHA512

833d9385341b1241b777bb316fe78ba1b5a00eeaef1bd3895f92e397df7c37d08cd1c4b983f08490f0c41d61b852085a0910f17d973877de7b67139774699044
SSDEEP

6144:+6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:+6qIprYLsr0iktjrpDSFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c15a2b179c6df74c183bc18132d0fbea

Files

c15a2b179c6df74c183bc18132d0fbea
.exe windows:4 windows x86 arch:x86

a993ca40d02e82d821508a4297e33ebb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetErrorMode
GetLocaleInfoA
LoadLibraryExA
GlobalAddAtomA
GlobalFree
GlobalAddAtomA
EnterCriticalSection
RaiseException
InterlockedExchange
VirtualProtect
GetACP
GetFileAttributesExA
GetCommandLineA
GetSystemDirectoryA
GetLogicalDrives
GetStdHandle
Sleep
LockResource
HeapCreate
GetLastError

user32

BeginPaint
FrameRect
GetParent
DrawTextA
ValidateRect
GetWindow
SetForegroundWindow
GetFocus
GetActiveWindow
ShowWindow
EndPaint
IsIconic
FlashWindowEx
wsprintfA
ReleaseDC
FillRect
GetWindowTextA
GetCursorPos
GetClassNameA

httpapi

HttpAddUrl
HttpAddFragmentToCache
HttpInitialize
HttpCreateHttpHandle
HttpTerminate

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ