93b1d269ac2bd00647eac6f6d5ca842c41ee9f2bba2c617ba3fed44f883cbcc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93b1d269ac2bd00647eac6f6d5ca842c41ee9f2bba2c617ba3fed44f883cbcc5
Size

49KB
MD5

14deef97ca798f141cb9a3df77ceea9a
SHA1

eb6f38e4cd5d5cb083ad5c9650caea1a69580834
SHA256

93b1d269ac2bd00647eac6f6d5ca842c41ee9f2bba2c617ba3fed44f883cbcc5
SHA512

6f7e7c4431241710802bbe1093e7da65f0fad449066b567fd4c86c2a5862e886df62630679508c582658a3e0edf4f84f39a3b44b2af988a0e6f8a1ba0f82fec9
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI9:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b1d269ac2bd00647eac6f6d5ca842c41ee9f2bba2c617ba3fed44f883cbcc5

Files

93b1d269ac2bd00647eac6f6d5ca842c41ee9f2bba2c617ba3fed44f883cbcc5
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE