5b89c341da0194e739ee49d56fbedce67d1ad2fb96bb9ff8258bad258bfbd00e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b89c341da0194e739ee49d56fbedce67d1ad2fb96bb9ff8258bad258bfbd00e
Size

55KB
MD5

c43c0731764e4d2ecd767953a7c20c25
SHA1

e59726fd0ec374a317c676f6bbae2172786b331f
SHA256

5b89c341da0194e739ee49d56fbedce67d1ad2fb96bb9ff8258bad258bfbd00e
SHA512

e70c83fa35d0c18b5a5d0c699456ab62996d055f036218eacf673870ec7ff2a9f9c4f1b7248eef4a4dff752cc8179112b5c4a6360b775e945f1fdd39faf2f8d3
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIc:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b89c341da0194e739ee49d56fbedce67d1ad2fb96bb9ff8258bad258bfbd00e

Files

5b89c341da0194e739ee49d56fbedce67d1ad2fb96bb9ff8258bad258bfbd00e
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE