6535cc691f5f24686cf689221135c18b4fcdab2af6b0efba4f5e16c850493c60 | Triage

Sharing

General

Target

6535cc691f5f24686cf689221135c18b4fcdab2af6b0efba4f5e16c850493c60
Size

25KB
MD5

00d102459fd5e812364812813d46296c
SHA1

9275170bfc448aed57f07d9faf0ba6890c9c1157
SHA256

6535cc691f5f24686cf689221135c18b4fcdab2af6b0efba4f5e16c850493c60
SHA512

1581825c6c463d4894a18282cfaf032141641a99a97fae8a553dc58f2beec6b6a35e586b6ef9a63d9ba3c3d547c9296d0f35a8e34fef9cd7a7ee1aa727bc32e3
SSDEEP

384:2MMtyNUXRkRAiu9PbX2yl8W/8AoW63nQFxH/f4kVdjaLacmkC0GJsJxXSoVcGtWl:OW2GAMXQFxfftjaLacmkLGKZSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6535cc691f5f24686cf689221135c18b4fcdab2af6b0efba4f5e16c850493c60

Files

6535cc691f5f24686cf689221135c18b4fcdab2af6b0efba4f5e16c850493c60
.exe windows:4 windows x86 arch:x86

0ac7de91a2eaf419c7fa5752b6cd5fb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
WinExec
GetTempFileNameA
GetTempPathA
Sleep
GetSystemDirectoryA
CreateFileA
LoadLibraryA
GetPrivateProfileStringA
ExitProcess
WritePrivateProfileStringA
OutputDebugStringA
GetModuleFileNameA
GetWindowsDirectoryA
FreeLibrary
GetLastError
DuplicateHandle
GetCurrentProcess
GetProcAddress
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

msvcrt

strcpy
strcat
strrchr
strcmp
memset
atoi
strlen
strchr
_except_handler3
_stricmp
_itoa

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA

shlwapi

PathAppendA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ