bfb0c6504cfdfae266f968fb6112b567eb1cf0a0fa273483636c849e570ecfdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfb0c6504cfdfae266f968fb6112b567eb1cf0a0fa273483636c849e570ecfdf
Size

10KB
MD5

7d0c8048bf0c4939a401fa2fabc1916f
SHA1

9d6f46e448e933addb8a9599ebbbfc17ac5c34fe
SHA256

bfb0c6504cfdfae266f968fb6112b567eb1cf0a0fa273483636c849e570ecfdf
SHA512

460ab9833fe32f4b2eeec86e2468c466d8d0e804f975348b1880d4b4ddbac765aa20e39ce80d8d53128e60efeff9eda5bea036a502bebbcc2991fe9d4eb86ad2
SSDEEP

192:rmQMKsnfinKfzzRwbdiELTi1Wnl5WRCgO84WYLn1OeaZNAhqv6Wix8u3h5:mKAf+KfztRvRHOpbL1fMAfWi8u5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfb0c6504cfdfae266f968fb6112b567eb1cf0a0fa273483636c849e570ecfdf

Files

bfb0c6504cfdfae266f968fb6112b567eb1cf0a0fa273483636c849e570ecfdf
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ