f928a8c69b98478f47e20a7f03a14c72236a7273b595add573f94a3fa3b92f0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f928a8c69b98478f47e20a7f03a14c72236a7273b595add573f94a3fa3b92f0a
Size

3KB
MD5

c98867deb23b3006a122baee3efb529e
SHA1

654c5eebe50093c77600216264f95ae83db84aa2
SHA256

f928a8c69b98478f47e20a7f03a14c72236a7273b595add573f94a3fa3b92f0a
SHA512

4e4214300b29d088ab9722c891ed2bc940c038214f24e343314b08227b7eab5acd9b8b0ea1285802536fbd404c983d40026d8425b87ff7769b16423ed12dce95

Score

N/A

Malware Config

Signatures

Files

f928a8c69b98478f47e20a7f03a14c72236a7273b595add573f94a3fa3b92f0a
.exe windows x86

ff7fc7139f8e75c07ae770fbd20949ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

ws2_32

recv
gethostbyname
socket
closesocket
WSAStartup
WSACleanup
connect
send

kernel32

CloseHandle
WriteFile
WinExec
Sleep
MoveFileExA
LoadLibraryA
GetProcAddress
GetModuleFileNameA
ExitProcess
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE