d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015 | Triage

Sharing

General

Target

d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015
Size

11KB
MD5

1bbd1a1ffaab13b7d54822fbd0087d68
SHA1

0301d2b6539d6725e8bd069183a95d3e0336e4e7
SHA256

d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015
SHA512

3990a72ceb7165debb86266035dd3f0aa6db504bc550bb2c2a5507684c4c30880ba83d1a57a2cdf70ff03b88b85cbd71ca5c5b19369191ffc7736d87b1b2d33c
SSDEEP

192:9mUWKs/gonKfzSh8cjPUN1DFpIWpoqZy2u2LTsd4p9gX+yHjqcz4lBUCLXBAm2SA:6K+ggKfzQ8YPUN1DFGWmqo2uQ/DguiLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015

Files

d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ