a6e44eb2440de69bd939d6a59936db05cbe6770983b29e3486f772e084361ff8N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6e44eb2440de69bd939d6a59936db05cbe6770983b29e3486f772e084361ff8N
Size

61KB
MD5

57e6f470c48374b9fde1be5a5a054790
SHA1

955aba6eeec34d3b83d24781ee79e4f530b2a906
SHA256

a6e44eb2440de69bd939d6a59936db05cbe6770983b29e3486f772e084361ff8
SHA512

b7a263cb16263321c1c4becb8666f7fc50508c1e2c068bad111f4a97a094344fb0d558a020610cd345076c65a772d003a0f3b56e941c08503bcee2ddc14dd70f
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIh:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6e44eb2440de69bd939d6a59936db05cbe6770983b29e3486f772e084361ff8N

Files

a6e44eb2440de69bd939d6a59936db05cbe6770983b29e3486f772e084361ff8N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE