62955aaf9ed6809ce410873007bb3500N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62955aaf9ed6809ce410873007bb3500N.exe
Size

45KB
MD5

62955aaf9ed6809ce410873007bb3500
SHA1

b41fc55050e8beb305bd81f2d59a24b43e6cf6aa
SHA256

bdcd8fedd6067410e3c3faf0cb3a6ba2db47ae5793fc34496fe15249a0e63132
SHA512

717059226c1f48b710f29729a4fd3f373284bc665066f5cc9c72b9ae953cfafb55e5f757b384c76d4e0526fec22b1dbd0bafc2fa694d5593134b6c2e340b9c67
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhE:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62955aaf9ed6809ce410873007bb3500N.exe

Files

62955aaf9ed6809ce410873007bb3500N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE