ab07f639ca50d6a46a1dc7bf5494d1a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab07f639ca50d6a46a1dc7bf5494d1a0N.exe
Size

37KB
MD5

ab07f639ca50d6a46a1dc7bf5494d1a0
SHA1

2dcfdd94d7842ed3d795c20dafe12503b55df326
SHA256

d7d3788f4bc089072bdfec84b247887afc3c9c0b9c9f10911dd2e209e99b1e82
SHA512

187fafd2a306babeb6d30e46e801e4c7abb958c379f466db4da34b2fc021e98fc963d3185f8e5f8441f3f26ee66dfb6044fcbe2c908a9bf621b8a94bcb179cfa
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhK:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab07f639ca50d6a46a1dc7bf5494d1a0N.exe

Files

ab07f639ca50d6a46a1dc7bf5494d1a0N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE