2db0b0bc0571664e34e0df8b0067d210N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2db0b0bc0571664e34e0df8b0067d210N
Size

7KB
MD5

2db0b0bc0571664e34e0df8b0067d210
SHA1

4c07a153a27afa1026af8d0fabfe28d03a234758
SHA256

da0ed5c0b9bdbbd32afd9205ca2539ab8ee3b6fb5eb02e4a8024e23a6459f57e
SHA512

919dca486fbeadbbfffd8a26e94d8ab950873c0ebab125801e55a234fae8e04a1139919e572827cdc5e5e3c75261d3cad7e9eeeeb4f6648e691f6caca8076931
SSDEEP

96:QFYtKDvLGaQZLnHVNuwAnQWRRUI2CqDzcuUEMwxDqjUe:KYtKsZJNKQWRRZjuUEVejr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db0b0bc0571664e34e0df8b0067d210N

Files

2db0b0bc0571664e34e0df8b0067d210N
.exe windows:5 windows x86 arch:x86

b1decad0f067131fff2e76ab43787f60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

ReadFile
SleepEx
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrlenW
ExitProcess
DeleteFileW
lstrcmpW
WriteFile
CloseHandle
LoadLibraryW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ