194e14e446ae788d408c09098eb5272bd54bac771a12ec0be51869015b42647bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

194e14e446ae788d408c09098eb5272bd54bac771a12ec0be51869015b42647bN
Size

46KB
MD5

d260c30acff29913e3a5808db2464d50
SHA1

eef8675de8eb5c9255c9e7736f045d6ce9d8488c
SHA256

194e14e446ae788d408c09098eb5272bd54bac771a12ec0be51869015b42647b
SHA512

c6c3f40b930f6b19c08ab979d5e04aae244498f45c9922da9c40eb6c7d407cdbd0d96a9ca9921b0cb7863f68da585d54229df7d27522eceb5218d3f9bf81ac96
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhk:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194e14e446ae788d408c09098eb5272bd54bac771a12ec0be51869015b42647bN

Files

194e14e446ae788d408c09098eb5272bd54bac771a12ec0be51869015b42647bN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE