328524d05f66792df30101dadf686b6e084db46e9b697cc87121c871982611dd | Triage

Sharing

General

Target

328524d05f66792df30101dadf686b6e084db46e9b697cc87121c871982611dd
Size

77KB
MD5

445d450e5f3e20c26aa598f1aaf9bc22
SHA1

46b7d716e54ee6921c352bbc302c986996882dd8
SHA256

328524d05f66792df30101dadf686b6e084db46e9b697cc87121c871982611dd
SHA512

485146efd11b38c06bd3045e16a9518bac98f33a3a3bd62e38ca739a4a6e5bc6d5d5661601c9053da6356e2b09d8545257c4f50699bd4d43c19e1fe84add426b
SSDEEP

1536:vCWDKUlsCZD1mh8txVQnlRIFYK4Ncp1wDLqHE:6hjTOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
328524d05f66792df30101dadf686b6e084db46e9b697cc87121c871982611dd

Files

328524d05f66792df30101dadf686b6e084db46e9b697cc87121c871982611dd
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ