e65a946669f08ed7d0f309812db8706bb18a35d8a36dbc1224018cc1a221780eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e65a946669f08ed7d0f309812db8706bb18a35d8a36dbc1224018cc1a221780eN
Size

59KB
MD5

a0d5ef84da65d10d24c5b1e19efc3830
SHA1

60de68d9c83d25992cf60ab2a48ed444a3387608
SHA256

e65a946669f08ed7d0f309812db8706bb18a35d8a36dbc1224018cc1a221780e
SHA512

a9b81c50e6c324012c93e633d3e3a3e892ae5f7407c9ec498319dd1f2f568c77b8bc33577fd911d3359e09009b7c4ba5f8980ffb1b67b8a923365a9f7f22e2f4
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIz:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e65a946669f08ed7d0f309812db8706bb18a35d8a36dbc1224018cc1a221780eN

Files

e65a946669f08ed7d0f309812db8706bb18a35d8a36dbc1224018cc1a221780eN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE