c48791eb0740fef3b6fe3cd266f47ce302ea37e5da8d538d2267e7fbe3df9665 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c48791eb0740fef3b6fe3cd266f47ce302ea37e5da8d538d2267e7fbe3df9665
Size

30KB
MD5

26c399d9534285edaa995c08cd217d79
SHA1

7467aaa5c1e0127db7104cea20a8721ed451eb61
SHA256

c48791eb0740fef3b6fe3cd266f47ce302ea37e5da8d538d2267e7fbe3df9665
SHA512

67231dccca35b8154c4f9a59a41b17d34f15b75536042907ec6dde1d15b139c9deb2eeadf21fa0bcf4c09d2bc1aafed9b6903af2316ac9c13b9b34e26d2bfcb3
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgcV:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c48791eb0740fef3b6fe3cd266f47ce302ea37e5da8d538d2267e7fbe3df9665

Files

c48791eb0740fef3b6fe3cd266f47ce302ea37e5da8d538d2267e7fbe3df9665
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE