5a841fac704b9ef320c22e784d931fdb6be590c66c5a55a15aa37fff53e88063 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a841fac704b9ef320c22e784d931fdb6be590c66c5a55a15aa37fff53e88063
Size

4KB
MD5

5ec510d0327594142d3229fe025da78f
SHA1

abfc08d9e3c8f8954f8e63d7c215c8dfa464c835
SHA256

5a841fac704b9ef320c22e784d931fdb6be590c66c5a55a15aa37fff53e88063
SHA512

09ee7239ef1dd50a65fb8be18e435c59bf28a36fc18775ed56ba7dccc17d7c543f4d57db24ae0e8cba8a0189b0f8d98cecdc1fab96bb7a1f5db2cde43f0ba7e4
SSDEEP

96:ZSm9DsmQMKhNVXgC1RJD6nKymV44g+Sij:IYsmQMK5fd6nKfzgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a841fac704b9ef320c22e784d931fdb6be590c66c5a55a15aa37fff53e88063

Files

5a841fac704b9ef320c22e784d931fdb6be590c66c5a55a15aa37fff53e88063
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ