58d5552e7a37dba39325bccfd11828084cda93702d4b977298cc9646b38c954e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58d5552e7a37dba39325bccfd11828084cda93702d4b977298cc9646b38c954e
Size

34KB
MD5

9029e611825ba873c3aafe5d53fb2643
SHA1

3fd15818fd3acef3f65b720a5e3126535a0cc9ca
SHA256

58d5552e7a37dba39325bccfd11828084cda93702d4b977298cc9646b38c954e
SHA512

aa07acccf900f0610c1bd86b9b25db3724e386763e172af4bcda8d0f92ca18284c2a7105e7fee2d746d8ca4c6b516db54e05fb01ba91ba8d7763cd0e54ada0f0
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d5552e7a37dba39325bccfd11828084cda93702d4b977298cc9646b38c954e

Files

58d5552e7a37dba39325bccfd11828084cda93702d4b977298cc9646b38c954e
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE