ee1f79920c0dd6b7a2760e6f57a002dd5604fd3dc82681c0eb38670b984f97cdN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee1f79920c0dd6b7a2760e6f57a002dd5604fd3dc82681c0eb38670b984f97cdN
Size

56KB
MD5

d27cd237ab63a39ed974f96b1e5361b0
SHA1

9db5c7f6b8475b489fc4c2a9dcc1270531ad5787
SHA256

ee1f79920c0dd6b7a2760e6f57a002dd5604fd3dc82681c0eb38670b984f97cd
SHA512

b4e8b265d8713ec9969349f4baa1fb6e30c97b137c2c901b1906f02acd88b877490679ea985933a6cd8ef644731d79ed398aca2e5c17557ed120de1357bdd99c
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIz:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee1f79920c0dd6b7a2760e6f57a002dd5604fd3dc82681c0eb38670b984f97cdN

Files

ee1f79920c0dd6b7a2760e6f57a002dd5604fd3dc82681c0eb38670b984f97cdN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE