74bc64eff8c2218b1d30776f93798ffc47c599d17640cb7d6a17120f0f62a479 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74bc64eff8c2218b1d30776f93798ffc47c599d17640cb7d6a17120f0f62a479
Size

61KB
MD5

c9c46352ab8727d1cc5e52a21e1c05b3
SHA1

3f69d25fddd5bb1b7b23535c3e1365eefb01db47
SHA256

74bc64eff8c2218b1d30776f93798ffc47c599d17640cb7d6a17120f0f62a479
SHA512

089dd57fcf4bdb62b84c48724df9498ef47eb2c7dc70820fd7c7095ebc85590cf49ada448797373baa431619c901d32958d7752398154e29058739b709b0c24a
SSDEEP

384:ocnwR2MBLzV4F2JQv3ji/7Dp8IasNDWG38ZZzoSxlKhMgTWAR2WGCivK4I4YmFEl:PwRXWFPm1NDWjZZ8Sm2gTWtvCiemU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74bc64eff8c2218b1d30776f93798ffc47c599d17640cb7d6a17120f0f62a479

Files

74bc64eff8c2218b1d30776f93798ffc47c599d17640cb7d6a17120f0f62a479
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ