34b7afa78aab654e3509404f9d6f5b30ff086a90d6ead8f2ef8594009c40f6d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34b7afa78aab654e3509404f9d6f5b30ff086a90d6ead8f2ef8594009c40f6d7
Size

28KB
MD5

618f2fb0a68d9c2920d46c148b507e4a
SHA1

06d0da20332b12a149f770cf10312df2909aa23c
SHA256

34b7afa78aab654e3509404f9d6f5b30ff086a90d6ead8f2ef8594009c40f6d7
SHA512

271f30a9336189e242eac72e07a4610985625485d9225bb5f8c9ce8cff369bead81951ba5c5b512d6c6ca8a8690d3d86079411228cc4678acc281cead042bf04
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgcU:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34b7afa78aab654e3509404f9d6f5b30ff086a90d6ead8f2ef8594009c40f6d7

Files

34b7afa78aab654e3509404f9d6f5b30ff086a90d6ead8f2ef8594009c40f6d7
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE