c74a5b0009cce437dbad1c524f644d105971ae162f269cd4e1c6659b8225e506N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c74a5b0009cce437dbad1c524f644d105971ae162f269cd4e1c6659b8225e506N
Size

47KB
MD5

10886f6338fc180acb9d9d5a1c08baf0
SHA1

fed461b2940839194b4cb4d7a21ee00f78195882
SHA256

c74a5b0009cce437dbad1c524f644d105971ae162f269cd4e1c6659b8225e506
SHA512

574a9579a80b97f681f0ca2011f46e92cdea2020c5c2013536f94227c840bbbb82380eefb75243c7ddd2bfacb30e966f0221b4c3a4e1b3fd2b0299eadbd0fdf7
SSDEEP

768:f+fAQqud1lKAKmy5ne+9lWNNnLyLpIgAX/:fMdvBKmy5e+H8nedIgAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c74a5b0009cce437dbad1c524f644d105971ae162f269cd4e1c6659b8225e506N

Files

c74a5b0009cce437dbad1c524f644d105971ae162f269cd4e1c6659b8225e506N
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ