a354db9b0fd17a07c587ad22687984b141d0d73311ad0ce70ca67411cede597c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a354db9b0fd17a07c587ad22687984b141d0d73311ad0ce70ca67411cede597c
Size

44KB
MD5

c092039c5598dfceadc4e7bb30c28d02
SHA1

235246ca2ab5be815a123f9b029f1e03c55cfc3f
SHA256

a354db9b0fd17a07c587ad22687984b141d0d73311ad0ce70ca67411cede597c
SHA512

92e708d0af537f869f4a918bba76fe1b71f9fad99d1a3de3bd768e2a8713666b81daae634dac2fe93f8660fc0bd69b9bc381e9178b1cb53daf5c724d767b055f
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNht:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a354db9b0fd17a07c587ad22687984b141d0d73311ad0ce70ca67411cede597c

Files

a354db9b0fd17a07c587ad22687984b141d0d73311ad0ce70ca67411cede597c
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE