c4b9f9c81a692339957b1284442bdaaaeb7fe4c6d0b1ec3a028ba3413ff9f13aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4b9f9c81a692339957b1284442bdaaaeb7fe4c6d0b1ec3a028ba3413ff9f13aN
Size

54KB
MD5

72a6b93108d885948717cf0bb83612c0
SHA1

e055534b74e42dc6efcd5d27fadc6a0ed92acd5f
SHA256

c4b9f9c81a692339957b1284442bdaaaeb7fe4c6d0b1ec3a028ba3413ff9f13a
SHA512

1463fddfd3ba46a43c9900753ac978e8cddc150c7bceb9e599f8d5778975eb5d6700cd376d06c189c564e9cd0e8ed03628d15f788861b1d210c6b8cbf03cba9b
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4b9f9c81a692339957b1284442bdaaaeb7fe4c6d0b1ec3a028ba3413ff9f13aN

Files

c4b9f9c81a692339957b1284442bdaaaeb7fe4c6d0b1ec3a028ba3413ff9f13aN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE