ad49b9bd4d3d7648db6ca47d6b048ef0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad49b9bd4d3d7648db6ca47d6b048ef0N.exe
Size

47KB
MD5

ad49b9bd4d3d7648db6ca47d6b048ef0
SHA1

5d049c1db0d52b28607828dee6ca8a4fe782fcb0
SHA256

5de5d8e038de244a3e6a4718b2dc71c08510d54cc28f2dbb23fd5cc92dee0b3d
SHA512

aa65f92ef94cded41d3495f83871a260ebd8aace4bbef347043fa42b76b52c6d25fe46d949a9fc8ed1e99b5b86363b70bbed548b247c225df3ba324f8947a06d
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhW:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad49b9bd4d3d7648db6ca47d6b048ef0N.exe

Files

ad49b9bd4d3d7648db6ca47d6b048ef0N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE