199e604fb9cf16d2337c5bca8fde3c686570353d588db07788e0dea4dd93c78d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

199e604fb9cf16d2337c5bca8fde3c686570353d588db07788e0dea4dd93c78d
Size

18KB
MD5

8f16a9a171c8564bf800f66eb4a3195c
SHA1

445659a379f1ae3ba29c952d4d72e49c773dd1af
SHA256

199e604fb9cf16d2337c5bca8fde3c686570353d588db07788e0dea4dd93c78d
SHA512

ae87d3fdecd17d1ae47c50c0310d019f10a31452dbb9b67890b98d62a3b0f207808a70ad689397104e4dedd2d46e45ef5e2d076f135db1308ea25cac33acfee1
SSDEEP

384:Bn3OK/4TIF+/EdvyZzfdBwCkge3NL6I6JTYXEU4EZaKHoaanm:l+s6IF+Uvsz74LzUYXEU46aSSnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199e604fb9cf16d2337c5bca8fde3c686570353d588db07788e0dea4dd93c78d

Files

199e604fb9cf16d2337c5bca8fde3c686570353d588db07788e0dea4dd93c78d
.exe windows:4 windows x86 arch:x86

18c3cd01b0b0d75bdb8ffaa773f7aba9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetProcAddress
GetModuleFileNameW
GetTempPathW
GetVersionExW
LoadLibraryA
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

user32

wsprintfW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ