bd0fc292b491190ccc7160e63349a904b190704b7d50044249cdd11a6923b4f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd0fc292b491190ccc7160e63349a904b190704b7d50044249cdd11a6923b4f5
Size

24KB
MD5

fc50fe307de70872c4c6942c7c784cc9
SHA1

9ae52c21a4ab4a050efc63c416591bf88c851050
SHA256

bd0fc292b491190ccc7160e63349a904b190704b7d50044249cdd11a6923b4f5
SHA512

21a22b7efcf7e2a2f612d06ab2bf12c6f14c475af4f24f49553431866d41add990cdc4816e7369f2b8b7e788fbdd648d4991a392f3e8cb4a231f8a4746734f9a
SSDEEP

384:40KrUduxH4MKdT0840VXhDOfybVa45pwIwvxg1Q57pZCuZM7/qNgUdYwo/b9LT0L:40FeWIuxDlV/5pz8ga7FZM7/qPdYL9Xa

Score

N/A

Malware Config

Signatures

Files

bd0fc292b491190ccc7160e63349a904b190704b7d50044249cdd11a6923b4f5
.exe windows x86

f9b67ea39d2102a148ade19ec5c80ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
Extract
CreateAsyncBindCtx
IsValidURL
URLDownloadW

wsock32

accept
bind
htons
sethostname
WSAStartup
htonl
SetServiceA
gethostbyaddr
listen

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE