4b6e029129943f995374f2c6eb41ad3edda120a85509786c70f6d76a52fda97d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b6e029129943f995374f2c6eb41ad3edda120a85509786c70f6d76a52fda97d
Size

46KB
MD5

7bf4223683b31e8316dff0712cf98109
SHA1

71e2111e44ff55f387b90e829ea40172fedabe00
SHA256

4b6e029129943f995374f2c6eb41ad3edda120a85509786c70f6d76a52fda97d
SHA512

6e350d21b9c75a0b708fa434429a61b478c3459447e3ec7c40b6db8212bc3e7d9d269395849179229350a81c3004b6cf6435c9d27269d181e8cab2d3d4a4e3aa
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhG:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b6e029129943f995374f2c6eb41ad3edda120a85509786c70f6d76a52fda97d

Files

4b6e029129943f995374f2c6eb41ad3edda120a85509786c70f6d76a52fda97d
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE