740a2f6a8471f9d418d677a92dfd0c75f16990a54ed25736b8812a5826be1e38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

740a2f6a8471f9d418d677a92dfd0c75f16990a54ed25736b8812a5826be1e38
Size

19KB
MD5

aff0760ba6eb7a600e39608a75eb611f
SHA1

7b6f97d07944c1c78b30463dc68bd5a1fb8e965c
SHA256

740a2f6a8471f9d418d677a92dfd0c75f16990a54ed25736b8812a5826be1e38
SHA512

480d42db4ca70f90c04c120d8f31ce9824d472db064520e450769148d27e82e9f95a05a877d5d9bca2cd12c9fcb4d6e648e3fcc807011d4a7b2edbb2b0dd8942
SSDEEP

384:IR6lDvRjOpRLdtWTBeuJbheXTOUNN+saMPHZpZZ:IkDvNOpNXfu+TOevDZ

Score

N/A

Malware Config

Signatures

Files

740a2f6a8471f9d418d677a92dfd0c75f16990a54ed25736b8812a5826be1e38
.exe windows x86

1b51dbe324150688ce5e3a0742d34a26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE