f911f5a01f71d8f668054cb0ef12a5ef599cc4b9ce3269d43597a03182b88ec7 | Triage

Sharing

General

Target

f911f5a01f71d8f668054cb0ef12a5ef599cc4b9ce3269d43597a03182b88ec7
Size

5KB
MD5

45485e850a0a22a83861016a18ac711c
SHA1

7e8b5266ae98b81db0d357da8ef87b0890dac181
SHA256

f911f5a01f71d8f668054cb0ef12a5ef599cc4b9ce3269d43597a03182b88ec7
SHA512

6d59c5e7b42c81c437da1d4aebc7a544ca616b7dc566fe86e95e877cc9a08a419847c3585726f1c76cf13bbbfa15b4935b05a757be12e0093b83d0e21e7e8c95
SSDEEP

48:6TTvtHhWXpBPIl6VSu7BX5VuTzuLhAs+VONLTrg7DYLGdfdN9orw2bWz:etHAXpnVSu7p5aOmfVOJTr62yor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f911f5a01f71d8f668054cb0ef12a5ef599cc4b9ce3269d43597a03182b88ec7

Files

f911f5a01f71d8f668054cb0ef12a5ef599cc4b9ce3269d43597a03182b88ec7
.exe windows:4 windows x64

9db143379f0b33513aa87dba94b39290

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ