c74fd7779f71449d85ca14b0dbb945f7b6ac8161d52ba7cec27cc9ccfabc5351 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c74fd7779f71449d85ca14b0dbb945f7b6ac8161d52ba7cec27cc9ccfabc5351
Size

11KB
MD5

16472273783bebece0ef0f7c613b625b
SHA1

a88043f0fee0d0a86f966e690adbcfe83876f867
SHA256

c74fd7779f71449d85ca14b0dbb945f7b6ac8161d52ba7cec27cc9ccfabc5351
SHA512

11e2d18d87662f4b22ca66b7594e06a8172ee8e5b1e890e9e3dcbd23d257aee91c03e9e21fa6728a75aeb2928f3ccd21a63a5037ff0fe98009487b6894f75358
SSDEEP

192:qmUWKs/F5nKfzvzrXkC6DEUyU2wX/BJWa9St+YiC/:fK+FVKfzLrb6DEOGYS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c74fd7779f71449d85ca14b0dbb945f7b6ac8161d52ba7cec27cc9ccfabc5351

Files

c74fd7779f71449d85ca14b0dbb945f7b6ac8161d52ba7cec27cc9ccfabc5351
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ