dd7743af1a8a4e10ea933effa3b8689686bf75c9dfda6590f55c9de82e480107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd7743af1a8a4e10ea933effa3b8689686bf75c9dfda6590f55c9de82e480107
Size

16KB
MD5

3e0aa26af97fc595189d02045364c51f
SHA1

1652f8b8127c415030e1a49d50a306134a5f7aa4
SHA256

dd7743af1a8a4e10ea933effa3b8689686bf75c9dfda6590f55c9de82e480107
SHA512

56ca08c6e57d92f3b7d0b073b23446cf1251ac63184ad7adf433bcfb4da4537cd3097ae0615c6d95f5f5c92ec3e3e9390388aae7b908993f70494b074402803d
SSDEEP

384:Bn3yK/444daQ15NcQDsUq5ws4IbFekIb4n:lis14daQTBAUIw7I5s4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd7743af1a8a4e10ea933effa3b8689686bf75c9dfda6590f55c9de82e480107

Files

dd7743af1a8a4e10ea933effa3b8689686bf75c9dfda6590f55c9de82e480107
.exe windows:4 windows x86 arch:x86

18c3cd01b0b0d75bdb8ffaa773f7aba9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetProcAddress
GetModuleFileNameW
GetTempPathW
GetVersionExW
LoadLibraryA
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

user32

wsprintfW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ