15a15ca80d72667e2d140a59dd155afcb9e88be3621715c5d89f9c69ed20e3f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a15ca80d72667e2d140a59dd155afcb9e88be3621715c5d89f9c69ed20e3f5
Size

7KB
MD5

007605d5770c4251175b27e24eac6f00
SHA1

1a843f9813c2a049501920bfb577c79ef2ac2819
SHA256

15a15ca80d72667e2d140a59dd155afcb9e88be3621715c5d89f9c69ed20e3f5
SHA512

d0860f25042f919a7d9a2c8ddef12397e483ff7035b1a3f051d8a9407bb55ac977fbc68ad9ca3d2fec2131f6507a0d01b497cde00b4f0f5d4ab96c4a02d4635c
SSDEEP

96:q2hREX9HyUrBp9i1VZmca3gqeyNtD5co+hDWFA/I/sFHXx5N3n4/Ahw:yX9ljQ/sc9qeYtlcVWeosV/pn4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a15ca80d72667e2d140a59dd155afcb9e88be3621715c5d89f9c69ed20e3f5

Files

15a15ca80d72667e2d140a59dd155afcb9e88be3621715c5d89f9c69ed20e3f5
.dll windows:4 windows x86 arch:x86

617087458adc99dfa1ec79c51a3962eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
Sleep
lstrlenA
GetProcAddress
LoadLibraryA
lstrcpyA
CloseHandle
OpenProcess
lstrcmpA
lstrcatA
CreateFileA
GetTempPathA
lstrcpynA
WaitForSingleObject
GetLastError
CreateMutexA
DisableThreadLibraryCalls

user32

wsprintfA

ws2_32

WSAStartup
WSACleanup
gethostbyname
gethostname

msvcrt

free
_adjust_fdiv
malloc
_initterm
memcpy
strstr
_strlwr
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
sscanf
exit

rpcrt4

UuidCreateSequential

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Exports

Exports

Config

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ