b358b4788174a0f304828fa06b7535c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b358b4788174a0f304828fa06b7535c0N.exe
Size

46KB
MD5

b358b4788174a0f304828fa06b7535c0
SHA1

90878333457dcae8eb9adc258a942edd9e9bfdf0
SHA256

257a57a8c05732e4bd8e509f2f99f5aa889f59ab22180a8d586b0af095653fa6
SHA512

f478a8241c9f57e72e8d7a92e3a1b26b3f363f6e20466ca0a81bde54b6562a5d036e11085fe3b8cf156c7848ba4b56cd7c5e92dbd9bddb149de7e7b523f3e1c1
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhI:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b358b4788174a0f304828fa06b7535c0N.exe

Files

b358b4788174a0f304828fa06b7535c0N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE