6407346a5921946399da6818089e16dcf03727004de92c4decb6886253560e0aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6407346a5921946399da6818089e16dcf03727004de92c4decb6886253560e0aN
Size

60KB
MD5

e9b8f031fd603838fd09626b13f84a50
SHA1

c2aba2a128fc9e30084f95a0be35940d5f39333b
SHA256

6407346a5921946399da6818089e16dcf03727004de92c4decb6886253560e0a
SHA512

cfd6148e8b79041bb0fd8dd5475cbbac78be9694dcc6bc8db293f60a87baf4ac71f0cb1adb892515cb060b24a2b9c6af2d8c7bf1dd63fed783d5333401550d9e
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIc:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6407346a5921946399da6818089e16dcf03727004de92c4decb6886253560e0aN

Files

6407346a5921946399da6818089e16dcf03727004de92c4decb6886253560e0aN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE