9cfd094c11bc357c8fb98a6adb55694e78cb26e2ccead0863113447d35f001fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cfd094c11bc357c8fb98a6adb55694e78cb26e2ccead0863113447d35f001fd
Size

42KB
MD5

4aa574a817ee21dceaa5ef5d4112beb6
SHA1

577d3f7215911563ce74b78512595c6c8a9eeb57
SHA256

9cfd094c11bc357c8fb98a6adb55694e78cb26e2ccead0863113447d35f001fd
SHA512

92eae62f5ef870a36e9825156aa265b782fd15d3c0e2ad2f5d083c331e661ba56b4cb171f105453a63fa48a33ca20df1b56bef08d717e7287fd1e83877d6d6a4
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh8:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cfd094c11bc357c8fb98a6adb55694e78cb26e2ccead0863113447d35f001fd

Files

9cfd094c11bc357c8fb98a6adb55694e78cb26e2ccead0863113447d35f001fd
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE