96617a64af06e3bbddf86c904e5835e645ef0f1e35ee7bfdcf87664f0d5956a2 | Triage

Sharing

General

Target

96617a64af06e3bbddf86c904e5835e645ef0f1e35ee7bfdcf87664f0d5956a2
Size

4KB
MD5

05073e5c1babb45031e99c0a17b5f819
SHA1

c88b477beac62c0724b0e296af85db5ccd8d79ff
SHA256

96617a64af06e3bbddf86c904e5835e645ef0f1e35ee7bfdcf87664f0d5956a2
SHA512

fc925d61b6a8a6a1a9d89a709ce82c6e1d18b3ce5eea39f211b970cf06eacb03f98ebc9be2b2786ed5e2e9c43abfa1b2c3dc012c8e261da22bc5d4f97af36cef
SSDEEP

48:Zdni+Wyi18DN0nCvTaE6nc9fhXcGEY3sJd9ga91RsuYnA7B8mOo4jUx7OtKGc:Z0v4mUWKh9ctgC1R3YnKymV44Sh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

96617a64af06e3bbddf86c904e5835e645ef0f1e35ee7bfdcf87664f0d5956a2

Files

96617a64af06e3bbddf86c904e5835e645ef0f1e35ee7bfdcf87664f0d5956a2
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ