b9fd9047becac808c58f6940c8dd1a2f92feed24b3f9e29a6360eec44897a0b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9fd9047becac808c58f6940c8dd1a2f92feed24b3f9e29a6360eec44897a0b2
Size

49KB
MD5

18036999115d626abbd547e88b292731
SHA1

c7c1f242017060b605aa8cbb9ef59a8df5dc923a
SHA256

b9fd9047becac808c58f6940c8dd1a2f92feed24b3f9e29a6360eec44897a0b2
SHA512

ccdca0b2379f44db7368af2c29986b261c9f2ce33b61715b256dd8600fd275d5d696eee38ffb8feb5e6b4d63b59f3e0fa44aa209d9c76f714c0e4784fcf7f082
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIl:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9fd9047becac808c58f6940c8dd1a2f92feed24b3f9e29a6360eec44897a0b2

Files

b9fd9047becac808c58f6940c8dd1a2f92feed24b3f9e29a6360eec44897a0b2
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE