f12be0760d8d9ba0393799db290ea211df68ad6074c73fd6196d8b041441c3b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f12be0760d8d9ba0393799db290ea211df68ad6074c73fd6196d8b041441c3b8
Size

57KB
MD5

6904beebc860f930c9d6e9ed323a46f9
SHA1

9cf860cee6838d27c9eed75d3a4ef8cf9f41d980
SHA256

f12be0760d8d9ba0393799db290ea211df68ad6074c73fd6196d8b041441c3b8
SHA512

2ad0f73e76d78b7767664c90c16d8f10a138da4806f1726daba3b6d7a1575e0d8924c9f8edae470f105bceb4bf025eba9b2851a2fe7b1647f40cea9507c8439d
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI4:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f12be0760d8d9ba0393799db290ea211df68ad6074c73fd6196d8b041441c3b8

Files

f12be0760d8d9ba0393799db290ea211df68ad6074c73fd6196d8b041441c3b8
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE