d4b973348033c0582154e6382d82b158620c85f8758d5e8dff43b24a359f7641N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4b973348033c0582154e6382d82b158620c85f8758d5e8dff43b24a359f7641N
Size

56KB
MD5

d00d7d71fa28aa0a2f77671a3dc78160
SHA1

c552996da2dc221e41648125de55d16b95dc1a51
SHA256

d4b973348033c0582154e6382d82b158620c85f8758d5e8dff43b24a359f7641
SHA512

1812be9a004fd840b510aa7ad4454f9905f4423f4f86e0f407197f30375c5f93b471d3c7ca82511af6799d719959c774324bc16e3dfbf149d5babeac3dc116f5
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI0:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4b973348033c0582154e6382d82b158620c85f8758d5e8dff43b24a359f7641N

Files

d4b973348033c0582154e6382d82b158620c85f8758d5e8dff43b24a359f7641N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE