9bbaf681bc2264d09ee4c535b73d68cf66bb983aec5ae3d2710e8eda6163bb50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bbaf681bc2264d09ee4c535b73d68cf66bb983aec5ae3d2710e8eda6163bb50
Size

42KB
MD5

ff851b02cb4074af08f323e94ec36456
SHA1

06cbf6665333438e88377cd2631a0b0aa9a1a849
SHA256

9bbaf681bc2264d09ee4c535b73d68cf66bb983aec5ae3d2710e8eda6163bb50
SHA512

29081bb157351e7d0e64d861453c3fde78a20187438832bd9bec987f56d271cfdcda4306b45781c201c7872ee7f6eba0999e4268c7c78ed7f84a89c250d1a673
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhs:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bbaf681bc2264d09ee4c535b73d68cf66bb983aec5ae3d2710e8eda6163bb50

Files

9bbaf681bc2264d09ee4c535b73d68cf66bb983aec5ae3d2710e8eda6163bb50
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE