c51cd1e3f89690341cbd0182c6f15e62439930c1fccd33f57518a5d54409209e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c51cd1e3f89690341cbd0182c6f15e62439930c1fccd33f57518a5d54409209e
Size

18KB
MD5

faaaf8818311f829fffc2aa0f23962e0
SHA1

c1e714491ed3abd0ef6a2af1a21878bcb94980d0
SHA256

c51cd1e3f89690341cbd0182c6f15e62439930c1fccd33f57518a5d54409209e
SHA512

59ddf2d68ca9ef3ea4e215892ce26805a15bf795bb65b179da890b16f6887c06127d1f7c969ef0dab6d27fb54b8e1c264720161ecae2976ddc8b78ec864f472c
SSDEEP

384:Bn3OK/4TIF+/EdvyZzfdBwCkge3NL6I6JTYXEU4EZaKnb:l+s6IF+Uvsz74LzUYXEU46ae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51cd1e3f89690341cbd0182c6f15e62439930c1fccd33f57518a5d54409209e

Files

c51cd1e3f89690341cbd0182c6f15e62439930c1fccd33f57518a5d54409209e
.exe windows:4 windows x86 arch:x86

18c3cd01b0b0d75bdb8ffaa773f7aba9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetProcAddress
GetModuleFileNameW
GetTempPathW
GetVersionExW
LoadLibraryA
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

user32

wsprintfW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ