006f411f0c54052fe88643f91f56cc1960f4c2e97584d219cea589e93bd03351 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

006f411f0c54052fe88643f91f56cc1960f4c2e97584d219cea589e93bd03351
Size

28KB
MD5

0555792e276494b9f393bccb54486f1b
SHA1

854d395efc04a199334d5cb10b0fb5fc5aad32df
SHA256

006f411f0c54052fe88643f91f56cc1960f4c2e97584d219cea589e93bd03351
SHA512

0d06e6d55bc40c0c280d85b4d26c28737506f7c17d0c16c7257475da43a0a396529ec805f331701f234822b8abf66877feec5e362a970dfd1906fd8291b34cc6
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgc5:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006f411f0c54052fe88643f91f56cc1960f4c2e97584d219cea589e93bd03351

Files

006f411f0c54052fe88643f91f56cc1960f4c2e97584d219cea589e93bd03351
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE