4c8e0c5d49dd2a4987d3771dd6a4b474a7c29c042173764c6f3703767a98910a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c8e0c5d49dd2a4987d3771dd6a4b474a7c29c042173764c6f3703767a98910a
Size

33KB
MD5

5287a876ad957cb70328f37c8625858e
SHA1

1038a2aaad33d39909d9c1fbf4ca414304a8b5c3
SHA256

4c8e0c5d49dd2a4987d3771dd6a4b474a7c29c042173764c6f3703767a98910a
SHA512

d3ce2a70355ab1b22af2110f1d7bc323eb379c397729a283f479da10db4ac4193822a864cf43d3f1be6c81f1b2b42e838d64ce10818a2be2f174ee7d57ab02c0
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhG:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c8e0c5d49dd2a4987d3771dd6a4b474a7c29c042173764c6f3703767a98910a

Files

4c8e0c5d49dd2a4987d3771dd6a4b474a7c29c042173764c6f3703767a98910a
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE