fc2fae299e7133c955f389416b906b549ecd84c7a497d103dace6e712d018e17 | Triage

Sharing

General

Target

fc2fae299e7133c955f389416b906b549ecd84c7a497d103dace6e712d018e17
Size

20KB
MD5

adb3b614817d7939f0b248fb24396b83
SHA1

38fef71d7ce0b668097d0aae42958621ff4878bb
SHA256

fc2fae299e7133c955f389416b906b549ecd84c7a497d103dace6e712d018e17
SHA512

5cf29771c02828ebcae822fa0b1f1f01ad9483cbebc2915fbd8c700f9f6468db24e8b1ee0696a5427cc4011e165ddb965d8ec062ade0d1e1c1b14e603e52bc2e
SSDEEP

192:aaqG/Or1fF4qxfSq+mms64Ze0aYgJbSzCCiyuXP1oynmoQYJ:oFZSq+H0aYgF914oQYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2fae299e7133c955f389416b906b549ecd84c7a497d103dace6e712d018e17

Files

fc2fae299e7133c955f389416b906b549ecd84c7a497d103dace6e712d018e17
.exe windows:4 windows x86 arch:x86

657d18165a1c51a86c0932f3b3cb5d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_stricmp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

kernel32

CreateFileA
WriteFile
CloseHandle
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
GetFileSize
SetFilePointer
Sleep
GetModuleHandleA
GetStartupInfoA
ReadFile

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE