Ip_lookup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ip_lookup.exe
Size

99KB
MD5

2d617cf620eb517d510068f10e7dac52
SHA1

65763f83164e7ae2b62ed10a76c23a1d5aecb063
SHA256

159ff9b93f5580eedaba88a6597662a9c263f3c5f22c85c8319f854ba7d899cf
SHA512

14aadd47fcd918d434befe4d5200ade4d39f8ab298e31dbc89cfc8ec3701531a33d455d21fa87de59c021d2d2ac53787d0b13d003b2155909afcee6d39675cb6
SSDEEP

1536:bW4QktHly/XvAMaZmSNg+F8oH5a0EUeUMdW1hLj+Rbzh:3FyVeyq+Rbl

Score

1^/10

Malware Config

Signatures

Files

Ip_lookup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ