241dd4fbf295188d5a717324f9719190N | Triage

Sharing

General

Target

241dd4fbf295188d5a717324f9719190N
Size

40KB
MD5

241dd4fbf295188d5a717324f9719190
SHA1

7d0b4494267939f2a9cfd5edfd99fcea875b4f3b
SHA256

09ba4a41504bc97d75103ac92f8754e65454dcecbc125e046ab55de5542d30f1
SHA512

997b5b229d9a011674ce2a055dd6c8b8ec77037b7e388397f00347f2e9f106cee5a96d8066bd3f54baa927045bca68ce413cd54c0c4d1d2ecb252c22bdc41e0e
SSDEEP

768:/YzEI7aYv6N3a5smptK5VX1/fAgQSfbUG:jcaYvEa5LtanGSfbUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241dd4fbf295188d5a717324f9719190N

Files

241dd4fbf295188d5a717324f9719190N
.exe windows:4 windows x86 arch:x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ