604b55a3bec80fad67af3d9e9ed9063fa7e574e9583bdcc33e926fd8786e49a3N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

604b55a3bec80fad67af3d9e9ed9063fa7e574e9583bdcc33e926fd8786e49a3N
Size

44KB
MD5

34e5878a247438ddfa985106ae485fc0
SHA1

aafef0724928eed3096bab034d7351e6f3820e64
SHA256

604b55a3bec80fad67af3d9e9ed9063fa7e574e9583bdcc33e926fd8786e49a3
SHA512

6ff2a896bae87036faa9879a90a21bd44a213032ec97621ea7948ca4f152a0593ca0f5d916643b0934cbfd0797ce560c206275519c84fba13f71c7fa83e27555
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhe:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
604b55a3bec80fad67af3d9e9ed9063fa7e574e9583bdcc33e926fd8786e49a3N

Files

604b55a3bec80fad67af3d9e9ed9063fa7e574e9583bdcc33e926fd8786e49a3N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE