97fcd8966eecc2478b65e9ca2ff057cf786826cc45bfe05dedc75918397cc74a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97fcd8966eecc2478b65e9ca2ff057cf786826cc45bfe05dedc75918397cc74a
Size

12KB
MD5

bf4cd9cba786bf088b5ed7abad1eb6e9
SHA1

54769f4a464fb7f9d2283af3e54c60aa34634308
SHA256

97fcd8966eecc2478b65e9ca2ff057cf786826cc45bfe05dedc75918397cc74a
SHA512

5784c0aee06bf173a2e132c8fe912926b5a67f1985047fda42979115e246bf20e617f7b9454fe44db5b397330f9d6f4ca5c7690ce47a8a15f9e2af615fa510e4
SSDEEP

192:lHFwFITsYHSYHhLS0VkdH3U4TnRNaNHZmljgaWZ+yenfxCIN:llwFITlhmskdjuHIjfWYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97fcd8966eecc2478b65e9ca2ff057cf786826cc45bfe05dedc75918397cc74a

Files

97fcd8966eecc2478b65e9ca2ff057cf786826cc45bfe05dedc75918397cc74a
.exe windows:5 windows x86 arch:x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ