67bf988e07e5f351001a0cabe3b0d2aa2ea685b6dd3d451ae7afc3d04badc93fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67bf988e07e5f351001a0cabe3b0d2aa2ea685b6dd3d451ae7afc3d04badc93fN
Size

46KB
MD5

51b640cd8665133ba1f7c43b55d6a640
SHA1

fbfe6b01fb1c3322b4e9b903f1cbf25905a916be
SHA256

67bf988e07e5f351001a0cabe3b0d2aa2ea685b6dd3d451ae7afc3d04badc93f
SHA512

4ebfa6f337c840484a581d7b7c5ee233fc302502354b9a528fa1ca7328b992bbc08d5dd193d138093fcde98257316f607b62a80fa456d0a198607a38ee4c4979
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhh:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bf988e07e5f351001a0cabe3b0d2aa2ea685b6dd3d451ae7afc3d04badc93fN

Files

67bf988e07e5f351001a0cabe3b0d2aa2ea685b6dd3d451ae7afc3d04badc93fN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE