eec1e35392d22e746c81a01458d54316e802691869c28f9e47ca2c2fed213fdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eec1e35392d22e746c81a01458d54316e802691869c28f9e47ca2c2fed213fdd
Size

2KB
MD5

a05b7a74d61c5920facdb9116be51cc8
SHA1

dd341e883907db0c16ae7ce6756bfaf2fc9fa036
SHA256

eec1e35392d22e746c81a01458d54316e802691869c28f9e47ca2c2fed213fdd
SHA512

2cc74842565e22ce9a7f14976c1577fd4ea2d9a144443726fda3312142c5b1c8dde3a93e30d710a4c86ab5a08aac53ddadc58a83f6ccfd7b1c043f8455240ab2

Score

N/A

Malware Config

Signatures

Files

eec1e35392d22e746c81a01458d54316e802691869c28f9e47ca2c2fed213fdd
.exe windows x86

9053c0c31cab7b0bf44922754ed568ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

ws2_32

send
recv
gethostbyname
connect
closesocket
WSAStartup
WSACleanup
socket

kernel32

GetModuleFileNameA
WinExec
Sleep
MoveFileExA
LoadLibraryA
GetProcAddress
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE