1ad1423c55bf5b694df0f28f345464dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ad1423c55bf5b694df0f28f345464dc
Size

22KB
MD5

1ad1423c55bf5b694df0f28f345464dc
SHA1

b8eb84c4f2ad137be000494a08f0190bc304241b
SHA256

bcef4b0bcc98333c70b36db2a8005384bd0c83de5411936c3dcd23873bcd0e13
SHA512

be0eee2a9e2dd0b4380ab5bd04de9d7a139bef72f9a77003dd5b405e66f165ac2d2e03ad3e2dbc3632554b0f6afb82744bf98e491ef3330be6db29d38f92c38c
SSDEEP

384:5CQARsXLYuSmmq6aYaBpYFSfjhXrToHWS4mW4sme9V:sRMVvmq6affYFSfjhr8sgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ad1423c55bf5b694df0f28f345464dc

Files

1ad1423c55bf5b694df0f28f345464dc
.exe windows x86

880bb6799a6e1a5ff7b4f022ff4003a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
_XcptFilter
_exit
_c_exit
toupper
sprintf
sscanf
__set_app_type
fprintf
_setmode
_iob
time
exit
isdigit
isxdigit
islower
_except_handler3
__p__fmode
_controlfp
isspace
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv

kernel32

GetModuleHandleA
GetLastError
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FormatMessageA
LocalFree

snmpapi

SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy

ws2_32

gethostbyname
inet_addr
ntohl
WSAStartup

iphlpapi

GetUdpStatsFromStackEx
GetTcpStatsFromStackEx
GetIpStatsFromStackEx
GetIcmpStatsFromStackEx

user32

CharToOemBuffA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ