bec31fc132cff00910cb07cf9d66c9fcf5ff511f8182b61622a18843f0fd5841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bec31fc132cff00910cb07cf9d66c9fcf5ff511f8182b61622a18843f0fd5841
Size

28KB
MD5

5d7c34b6854d48d3da4f96b71550a221
SHA1

1f0e20fbc74b4a7b1d73a0a6ac131f9543bd6cbb
SHA256

bec31fc132cff00910cb07cf9d66c9fcf5ff511f8182b61622a18843f0fd5841
SHA512

a64ab6e5bb122cb2585216429acce3fb42cf1b9d405b95b40865e8baefbef9a54220c0aabbb8e08f902711494f742118b5b45d065ba0338280ee9e3ff0d355bd
SSDEEP

384:Sq/siYlVI9TwDpwTd48bJwMyk9ZLZUL76q0C:D0iaiZ8wSy2Mn9w6qD

Score

N/A

Malware Config

Signatures

Files

bec31fc132cff00910cb07cf9d66c9fcf5ff511f8182b61622a18843f0fd5841
.exe windows x86

ffc71212c336901bb919a8a7e8c9ffe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAStartup
socket
htons
inet_addr
bind
WSAGetLastError
setsockopt
connect
send
recv
shutdown
closesocket

msvcrt

_controlfp
wcscpy
printf
memcpy
??2@YAPAXI@Z
wcslen
memset
free
??3@YAXPAX@Z
sscanf
strcpy
strlen
malloc
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

kernel32

MultiByteToWideChar
Sleep
CreateFileW
GetFileSize
GetFileTime
SetFilePointer
ReadFile
SetFileTime
WriteFile
CloseHandle

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE