0f758c8ce4d574ae408ff361c834a9ab70db4e1085d86a3da2e15f84f2bba06e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f758c8ce4d574ae408ff361c834a9ab70db4e1085d86a3da2e15f84f2bba06e
Size

30KB
MD5

766d05da7bae8505de6e90d1af4fa0e8
SHA1

29d8c108f846cf9a0c5330753efe3239381def25
SHA256

0f758c8ce4d574ae408ff361c834a9ab70db4e1085d86a3da2e15f84f2bba06e
SHA512

8bb2f5cd8a49b3ec96f8b7c7e7769872e5f87b3fd5972cbef12cff2aaca77c7e1d4180bc23455087dd14c9fb9df4480b7e5de23f411dabf3abf13b50d90b2143
SSDEEP

768:VqPJtMA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EwhSahGCoF:VqsA6C1VqaqhtgVRNToV7TtRu8rM0wYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f758c8ce4d574ae408ff361c834a9ab70db4e1085d86a3da2e15f84f2bba06e

Files

0f758c8ce4d574ae408ff361c834a9ab70db4e1085d86a3da2e15f84f2bba06e
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE