44fa6426a85772bc098a0cec52f7d62462038604bb5068084ddeab4584eba1a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44fa6426a85772bc098a0cec52f7d62462038604bb5068084ddeab4584eba1a6
Size

43KB
MD5

aa6ab6090f24ea6808ab9cdfa2f48df8
SHA1

6b2c45e954828f16eee60cb728318c744f78e182
SHA256

44fa6426a85772bc098a0cec52f7d62462038604bb5068084ddeab4584eba1a6
SHA512

2a1f2071c0876837f65f1ca1f7695048100f7f2ad0e16fc252f81d72e04cd13c4f7628324bbb9115a99a937017aa804d5695c5a5ba490d1137ab53ee9e187e77
SSDEEP

384:KK+fKfzsqud1lubAK0s2y5dro54fYu1wuoR:f+fAQqud1lKAKmy5hJeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fa6426a85772bc098a0cec52f7d62462038604bb5068084ddeab4584eba1a6

Files

44fa6426a85772bc098a0cec52f7d62462038604bb5068084ddeab4584eba1a6
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ