1ba155a1665216ebb80b31111c6f6ff6a5e233a699c2999335c6a7016a23229eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ba155a1665216ebb80b31111c6f6ff6a5e233a699c2999335c6a7016a23229eN
Size

25KB
MD5

a9f4e6b6dd6a00fe61813ba03f89cbd0
SHA1

4833d6e003ef4931b5efb604fbdf9ea1f82c6d54
SHA256

1ba155a1665216ebb80b31111c6f6ff6a5e233a699c2999335c6a7016a23229e
SHA512

11fae9882d330d602fc60870fe864f59a0b735a57f16b111080a44a113115852303bc42329def23f8334e059e58a4676bdec89cf52b78ca9a9ce0f7518e60636
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wk7IErqyEOGNFbuSxhLIsv/hDh9hUIF:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba155a1665216ebb80b31111c6f6ff6a5e233a699c2999335c6a7016a23229eN

Files

1ba155a1665216ebb80b31111c6f6ff6a5e233a699c2999335c6a7016a23229eN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE