5ef31b01385c475f835b66c1e66b1fa81a99a9b8a4da1f64541c1d0cdc9df4eaN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef31b01385c475f835b66c1e66b1fa81a99a9b8a4da1f64541c1d0cdc9df4eaN
Size

51KB
MD5

b9e3ccd1fc2c30f7452a8d4d0169f050
SHA1

f0cae5f2a38d76253f21e1e658988cdf81815b0b
SHA256

5ef31b01385c475f835b66c1e66b1fa81a99a9b8a4da1f64541c1d0cdc9df4ea
SHA512

790a91c45a5d18d0900f20afd0f62a007f81fd36a21ffe2a80f0d2667018b22a26254ade5c06573b0694d8ca05117b96ed25ba426e6d3e3101b933f3dd38fbe4
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIp:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef31b01385c475f835b66c1e66b1fa81a99a9b8a4da1f64541c1d0cdc9df4eaN

Files

5ef31b01385c475f835b66c1e66b1fa81a99a9b8a4da1f64541c1d0cdc9df4eaN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE