cac8a4129a52684307921eacc8bc34cc | Triage

Sharing

General

Target

cac8a4129a52684307921eacc8bc34cc
Size

9KB
MD5

cac8a4129a52684307921eacc8bc34cc
SHA1

a3373224a0d8c2c873d39980f3338cc74204e57e
SHA256

1bb9cf21e6793951310d907f2a66da31076c5b53757304a8f3184e090ffdf935
SHA512

6eb1d3b2b74caf6f2a58bce9f300d563b6243ea61e28725dd6b7a8a57bab0af063a1a7f46436d49b6390cd67af6b926cb5bb54f8d3308dbb6abc75ef64fa8d81
SSDEEP

192:XEYWQWRIgSU5PenzCHlXGO+++S5IwbB4Degb8:XTWQWRIgSKPumdDqDeH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cac8a4129a52684307921eacc8bc34cc

Files

cac8a4129a52684307921eacc8bc34cc
.exe windows:5 windows x86 arch:x86

3bd1cf97537104404441a903e61f0f5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestA
HttpQueryInfoW
InternetReadFile
InternetConnectA
InternetOpenW

kernel32

lstrlenW
WriteFile
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryW
DeleteFileW
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrcmpW
ExitProcess
ReadFile
CloseHandle

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ