73993b42415adcf3fb1377f584bf0887d51982206e1c60e1608e0bc63eb56fcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73993b42415adcf3fb1377f584bf0887d51982206e1c60e1608e0bc63eb56fcf
Size

4KB
MD5

336b8c442ec28fcf6a5415fc3bf5eae1
SHA1

8915363fadbc2fd7164e920d6ddd6e7f37e4e747
SHA256

73993b42415adcf3fb1377f584bf0887d51982206e1c60e1608e0bc63eb56fcf
SHA512

9251b886b2c9c35ebdad439a90cb10659105d8d3dcb5e527ca9b84da4eccc65627c01a838d4fb8d513014d5b86a44dec2b39d9ab5f75a7e893e33dcfef012945
SSDEEP

96:LZ6rShK5Ixw05lzI3jw1TYcfnp3V2Cn9O:LZxhK5nSzIzwpYYpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73993b42415adcf3fb1377f584bf0887d51982206e1c60e1608e0bc63eb56fcf

Files

73993b42415adcf3fb1377f584bf0887d51982206e1c60e1608e0bc63eb56fcf
.exe windows:5 windows x86 arch:x86

6ca37e5e41278ceac6bd8157d469b53e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wininet

InternetOpenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.MPRESS1
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE