c4464cea981c25f3123eb00626ba9f6a85eb5dba354e65690246482298b66cb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4464cea981c25f3123eb00626ba9f6a85eb5dba354e65690246482298b66cb5
Size

3KB
MD5

2a85542a928d2ab2575b24da6a2d97f3
SHA1

a28b67cf8e1cccc4df7a6042a932f8c2a9ecb5d3
SHA256

c4464cea981c25f3123eb00626ba9f6a85eb5dba354e65690246482298b66cb5
SHA512

42ccceb0e42c2e82f3842d067a4cc865e0ae908a1f5b21a0c7a16374dceb25cdf8732e5ffefba5134528864d68b1c63230194dd7243ecb89480691a9a3e01d4f

Score

N/A

Malware Config

Signatures

Files

c4464cea981c25f3123eb00626ba9f6a85eb5dba354e65690246482298b66cb5
.exe windows x86

a3ef79983d1d04d7d5ede41e116ad47a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

htons
recv
WSAStartup
gethostbyname
closesocket
socket
connect
send

urlmon

ObtainUserAgentString

kernel32

GetWindowsDirectoryA
GetFileAttributesA
GetLastError
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateFileA
ExitProcess

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE