5f8bbb1956bf41a9ea1cd6a627004ff2872a2a7754f7cb189fe6edb0bb9c7a46N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f8bbb1956bf41a9ea1cd6a627004ff2872a2a7754f7cb189fe6edb0bb9c7a46N
Size

36KB
MD5

44c9bd062b84e713b4e50ad5de8c9ae0
SHA1

baf6386645fc20f76e12c4cfb848df28369e7d14
SHA256

5f8bbb1956bf41a9ea1cd6a627004ff2872a2a7754f7cb189fe6edb0bb9c7a46
SHA512

7823055f01684d7d542e7bc79762ab4ba4402b587e8c7a37879b2b20005ca5c5fa36998f4a3f1bf4198cf029b2ed6fdcb9615d570ec76e8da254e3b58b86abb4
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh4:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f8bbb1956bf41a9ea1cd6a627004ff2872a2a7754f7cb189fe6edb0bb9c7a46N

Files

5f8bbb1956bf41a9ea1cd6a627004ff2872a2a7754f7cb189fe6edb0bb9c7a46N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE