3a6de941e9d681aeef256a96eee0bdcf5c68980ddb5fca62da9cab1397b64fb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a6de941e9d681aeef256a96eee0bdcf5c68980ddb5fca62da9cab1397b64fb6
Size

38KB
MD5

fb1a0b97a3fa1ecdd6aa6526e23bbfef
SHA1

76fa0e25d9a4b4d9fbb40cd5e2f0f7171c084517
SHA256

3a6de941e9d681aeef256a96eee0bdcf5c68980ddb5fca62da9cab1397b64fb6
SHA512

628c0b3deedfc2d64156ffdd02ec46fda66ee5f578bb1e6aa2f9421803b1ad8240ecec4980366d0ac02428759d9edb2df077d85ca5e6e32f4765bc41fa6c1313
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNht:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6de941e9d681aeef256a96eee0bdcf5c68980ddb5fca62da9cab1397b64fb6

Files

3a6de941e9d681aeef256a96eee0bdcf5c68980ddb5fca62da9cab1397b64fb6
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE