0ca60c19e588d5d1e4c664d6da06d20ec65b0b22141ebef41cfdfad3fca63ff0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca60c19e588d5d1e4c664d6da06d20ec65b0b22141ebef41cfdfad3fca63ff0N
Size

45KB
MD5

6071fa196b54b7077b85f9cf6d77a9d0
SHA1

41597b29168b996ce24394f6308be69fcc3373cd
SHA256

0ca60c19e588d5d1e4c664d6da06d20ec65b0b22141ebef41cfdfad3fca63ff0
SHA512

c8c7a71536de581fee2e71c01c8afaf147a5cac138aa12fbeb1273231378545a9ec43f408e5e2504cea0b05bd30b2e0a6c264051093feb4d3538ab320e29324b
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh1:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca60c19e588d5d1e4c664d6da06d20ec65b0b22141ebef41cfdfad3fca63ff0N

Files

0ca60c19e588d5d1e4c664d6da06d20ec65b0b22141ebef41cfdfad3fca63ff0N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE