839979387755aa557b886fc89098defc8ad8f822238e97b4adcd44087446d71dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839979387755aa557b886fc89098defc8ad8f822238e97b4adcd44087446d71dN
Size

49KB
MD5

880798ca12f16fb016e76796f06a0470
SHA1

48035113c2ce94bfa974f455379750e698fa2f82
SHA256

839979387755aa557b886fc89098defc8ad8f822238e97b4adcd44087446d71d
SHA512

e6b4557498066e273f99847601baf67c74d6b8a0a75e6808d43df16ab046295fe57ba1161a8c57953c6b4564c2db83adeecc70b3ac9e282c2d82c6e8160ea41d
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIT:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
839979387755aa557b886fc89098defc8ad8f822238e97b4adcd44087446d71dN

Files

839979387755aa557b886fc89098defc8ad8f822238e97b4adcd44087446d71dN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE