fcea9309f40e5a62fc159810a5dc7e941090d1435952e9f4b0ee18022abcbac4N | Triage

Sharing

General

Target

fcea9309f40e5a62fc159810a5dc7e941090d1435952e9f4b0ee18022abcbac4N
Size

64KB
MD5

42c222f20cb5b600b63a1af13076cde0
SHA1

2d03a78fd8d8176c988ff1199ef397b0fd05a372
SHA256

fcea9309f40e5a62fc159810a5dc7e941090d1435952e9f4b0ee18022abcbac4
SHA512

f1e443956a3ec2aeb7c69c7c0d81843c2f3f4bac6d2033489adc980f7e7107965eae32effb5a23a75ad2e2a01fa3a5a08e59876e756dc850875d48381cf842fc
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIb:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcea9309f40e5a62fc159810a5dc7e941090d1435952e9f4b0ee18022abcbac4N

Files

fcea9309f40e5a62fc159810a5dc7e941090d1435952e9f4b0ee18022abcbac4N
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE