a5ef14cacc9503a26ee73d6cb73e944cd1554ff1d956d84efd26bdd4fba1c1d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5ef14cacc9503a26ee73d6cb73e944cd1554ff1d956d84efd26bdd4fba1c1d6
Size

53KB
MD5

55e7dcd511fa459e1c7959ab1e7c652d
SHA1

973231761f7cc6c0b745d46a7bdb7656b25521c6
SHA256

a5ef14cacc9503a26ee73d6cb73e944cd1554ff1d956d84efd26bdd4fba1c1d6
SHA512

a03be1c237aff9e1b125aa1a810def929519bd18bd7c9ac1ebbf4b89e4e225817d98cb18e450285376a399cd738df6493997a4b892810593cf40211b40569b55
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIE:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ef14cacc9503a26ee73d6cb73e944cd1554ff1d956d84efd26bdd4fba1c1d6

Files

a5ef14cacc9503a26ee73d6cb73e944cd1554ff1d956d84efd26bdd4fba1c1d6
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE