4f400312bd46bb578db31842f96ba7506888a4375ed70528291fc6f36cda65a2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f400312bd46bb578db31842f96ba7506888a4375ed70528291fc6f36cda65a2N
Size

54KB
MD5

170229488337cd927f7cb61b2372daf0
SHA1

b8e9e753ba86b63de7e1724a00c708b5faa05304
SHA256

4f400312bd46bb578db31842f96ba7506888a4375ed70528291fc6f36cda65a2
SHA512

f73c2b55475d5c90c8e605ddcd1f78907aa33d03d6fbc7598d5f65e2639fb6ca8494ede79075de426bdeaabbdddcf5763f81ddc327a947e7a40abe4bdafc4174
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIY:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f400312bd46bb578db31842f96ba7506888a4375ed70528291fc6f36cda65a2N

Files

4f400312bd46bb578db31842f96ba7506888a4375ed70528291fc6f36cda65a2N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE