f968b098b549f783a7910ffe4360038e2f0eed2a0e4a139cb58540229e8e5c45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f968b098b549f783a7910ffe4360038e2f0eed2a0e4a139cb58540229e8e5c45
Size

36KB
MD5

5538446ac164355815a4613bc2c1a457
SHA1

091944977b5b6703e0714a787fd0e1cbc63239ce
SHA256

f968b098b549f783a7910ffe4360038e2f0eed2a0e4a139cb58540229e8e5c45
SHA512

2210d63b6ffe17df0e15b7e9598062e078d0eb27534d4f0bfbf77a102a4e222eac6a64f34cb4ae4b4dfb43d76a9cdd6a2e1987e8f68de0a0be664c0f1904c17b
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhz:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f968b098b549f783a7910ffe4360038e2f0eed2a0e4a139cb58540229e8e5c45

Files

f968b098b549f783a7910ffe4360038e2f0eed2a0e4a139cb58540229e8e5c45
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE