ff0415f2605d5b93f55327f7f147c0ef57e6b66df55800a678b3e0d3a980d1ed | Triage

Sharing

General

Target

ff0415f2605d5b93f55327f7f147c0ef57e6b66df55800a678b3e0d3a980d1ed
Size

35KB
MD5

5054031c57c59471b4cfb7aa8b06fa63
SHA1

7479f580e89b74533f911796ecc2dcca2d5d6378
SHA256

ff0415f2605d5b93f55327f7f147c0ef57e6b66df55800a678b3e0d3a980d1ed
SHA512

43dc4c6515082a3ce0dbaf436484fd991c6294a8ac60c23ba597ca8cdd9c38ad7a298d642282bcd6c5a313054cdee79b4b31bba69727ae4404c04bd2b1ddcf2a
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhi:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0415f2605d5b93f55327f7f147c0ef57e6b66df55800a678b3e0d3a980d1ed

Files

ff0415f2605d5b93f55327f7f147c0ef57e6b66df55800a678b3e0d3a980d1ed
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE