7a196d3c862406cfbe4994ec78992a466a08fd13325b4a990aeb47a2c8181a57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a196d3c862406cfbe4994ec78992a466a08fd13325b4a990aeb47a2c8181a57
Size

15KB
MD5

00e29fc79efdfaaf01c602e0e0822c6d
SHA1

16050b65a396094464840d896ef4aaf1fb8b14e4
SHA256

7a196d3c862406cfbe4994ec78992a466a08fd13325b4a990aeb47a2c8181a57
SHA512

96a2c2edad4a47a2cda61185ad43aa0570366f35867738530a4e8f3635a20999ace3467aa556711780830c4d1144a81599382a3396d19bfc98eeaee52b936abf
SSDEEP

192:sIs9YcLIkK49DVCF51N4Rcvly5hs/Fw56JlaufCcqy6TjWLkohwuAcflU5zHLMA9:sfalkfa1Ecvk52FwalLr6HMhij5Mg

Score

N/A

Malware Config

Signatures

Files

7a196d3c862406cfbe4994ec78992a466a08fd13325b4a990aeb47a2c8181a57
.exe windows x86

77ed1375d9d38b3b88bdebae2415b497

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

htonl
SetServiceA
gethostbyaddr
listen
closesocket
accept
bind
htons
sethostname

urlmon

IsAsyncMoniker
IsValidURL
URLDownloadW
ZonesReInit
DllCanUnloadNow
Extract
CreateAsyncBindCtx

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE