b78e60613d9e01b25a39dfed16650880N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b78e60613d9e01b25a39dfed16650880N.exe
Size

39KB
MD5

b78e60613d9e01b25a39dfed16650880
SHA1

1a557f79cab2c67f8e6b4861305253e7376f7f44
SHA256

64300623bd6ed5fad1a40f1f83bb7a83dfbaf2d5a33af3116c45461f2cd30e72
SHA512

0252e408a40d05685fc5f917c17585ab953ac94fb0b1c2215613e94e8817fae3bc290b033b26d89bac51a6eb2d925b91a4f0d52cc0ea8ffde9ecd7a143f0ee20
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh9:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b78e60613d9e01b25a39dfed16650880N.exe

Files

b78e60613d9e01b25a39dfed16650880N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE