efdc51570c7dae304efd2e26626f0b623aae0c32fae95fa0a4c4b5e5234b9da3N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efdc51570c7dae304efd2e26626f0b623aae0c32fae95fa0a4c4b5e5234b9da3N
Size

48KB
MD5

9607347ac18be53e9a076ac50c963010
SHA1

ef6c785a5eede6f3a2e5277790fc37adad5ef51d
SHA256

efdc51570c7dae304efd2e26626f0b623aae0c32fae95fa0a4c4b5e5234b9da3
SHA512

9a7939a29c35d4ddcb25daf57a9ede23278f67de0ac1a7d12ec4dc9c001e5d7fcbb3534713363f11676272ce397536ea13130f88d4a4da211021c0e249cd1373
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI3:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efdc51570c7dae304efd2e26626f0b623aae0c32fae95fa0a4c4b5e5234b9da3N

Files

efdc51570c7dae304efd2e26626f0b623aae0c32fae95fa0a4c4b5e5234b9da3N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE