6ac954982b43de75c21b6631c28b0ea897f333703c63a8ef345d6538f0fa3938 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ac954982b43de75c21b6631c28b0ea897f333703c63a8ef345d6538f0fa3938
Size

42KB
MD5

43f64c2ed03b17f9d853a7521a13e239
SHA1

33899ec51d157136c2cce93c2aba091d1a4c7c66
SHA256

6ac954982b43de75c21b6631c28b0ea897f333703c63a8ef345d6538f0fa3938
SHA512

804a21747b3a2615ba902bd5309bf24610397c5c13f0aec8b4ac5c94494d62214eb4f979c350bccbb960082c92aa4f6b231e6dd04d76aba643dd861faaf4a7f0
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhy:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ac954982b43de75c21b6631c28b0ea897f333703c63a8ef345d6538f0fa3938

Files

6ac954982b43de75c21b6631c28b0ea897f333703c63a8ef345d6538f0fa3938
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE