fad0b20d0b56328c2aebf04c287ce3dfe2ffcd9b528b851e23729e01105742a4N | Triage

Sharing

General

Target

fad0b20d0b56328c2aebf04c287ce3dfe2ffcd9b528b851e23729e01105742a4N
Size

4KB
MD5

3c19f6c8dad351ae89455278159e0e50
SHA1

85e5a1e02c7c6977c2976882354098957ea9962e
SHA256

fad0b20d0b56328c2aebf04c287ce3dfe2ffcd9b528b851e23729e01105742a4
SHA512

5910246b2fe0c601731e5ae3321dd5b0df84848939d2475c9f6761ed0e5676bd8af57fb0ad6816be88d364a03b2fad65028c71afa2514954af93a8c97c04067e
SSDEEP

48:q1vUC2Io9amFcWs4eWWeWjtJ3B1rsHB/VnC/RAxUDCSCa:m/RMmWZeWHWjtxBuHnnwR2UDCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad0b20d0b56328c2aebf04c287ce3dfe2ffcd9b528b851e23729e01105742a4N

Files

fad0b20d0b56328c2aebf04c287ce3dfe2ffcd9b528b851e23729e01105742a4N
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ