cf3adec84936a47727208b644e947fe19c82b432134bf45ac1c73318d33cbdd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf3adec84936a47727208b644e947fe19c82b432134bf45ac1c73318d33cbdd4
Size

53KB
MD5

ab2c2df54e69d6efa4e6d76625638649
SHA1

3e60ecaa616716ce985544898ce782cedc4414ee
SHA256

cf3adec84936a47727208b644e947fe19c82b432134bf45ac1c73318d33cbdd4
SHA512

6c64832f1e2dd9190b2aea63378cbd4e18dbf2b0ac9ceccbe3c1f1cdfeb02391f41b7f1dbd9517684ebd009c4a236758c5ad0d52d08dab732a92d7c20f3222be
SSDEEP

1536:Nu9zPRMLR5dct2BVPZWXpJA4URfcu9FwQRst:Nu9zZ8etUVwd7u9Fm

Score

N/A

Malware Config

Signatures

Files

cf3adec84936a47727208b644e947fe19c82b432134bf45ac1c73318d33cbdd4
.exe windows x86

4d30e2dc544db79b6e34c5744639563a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
Extract
CreateAsyncBindCtx
IsValidURL
URLDownloadW

wsock32

accept
bind
htons
sethostname
WSAStartup
htonl
SetServiceA
gethostbyaddr
listen

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE