92773c24aca226c4e366a1f94df95f19e793cae7916671ed4138f262dbbb524e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92773c24aca226c4e366a1f94df95f19e793cae7916671ed4138f262dbbb524e
Size

34KB
MD5

8efec2883d4d0fd2c03ec592a5c19732
SHA1

e34bfdf1664058f138014b5e3c6a5775053e7856
SHA256

92773c24aca226c4e366a1f94df95f19e793cae7916671ed4138f262dbbb524e
SHA512

b56a448c779f71089a5cd3a8b6b53d46ca40ffd573b70183158174fb3a0976d9c9850e1bf644cb50671f7f06426add443f18c22ec6b0f3f739af632e0a99397e
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhL:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92773c24aca226c4e366a1f94df95f19e793cae7916671ed4138f262dbbb524e

Files

92773c24aca226c4e366a1f94df95f19e793cae7916671ed4138f262dbbb524e
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE