e53f6a3a6411146fd495ff28e715cd85976e501ea4aeac9d02e101209c32b59c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e53f6a3a6411146fd495ff28e715cd85976e501ea4aeac9d02e101209c32b59c
Size

14KB
MD5

8e6acd6dc66bab04c6671a7bbf60ef59
SHA1

e15aa5d829955d36ceb9ea56be492dca4e33b48e
SHA256

e53f6a3a6411146fd495ff28e715cd85976e501ea4aeac9d02e101209c32b59c
SHA512

da5f7540d6ae23200e15f3f5ed3acd645ab9f9a87ae47dc93ebe7362f5f206ff07e7dd476819fdd545c32003e254afb543eb7388224070527c9ddfc69c29b180
SSDEEP

384:xfh+8XTW3qE/JEU/PJR5uxy/Hqs91vZI:xf08XqReiJRL1vZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e53f6a3a6411146fd495ff28e715cd85976e501ea4aeac9d02e101209c32b59c

Files

e53f6a3a6411146fd495ff28e715cd85976e501ea4aeac9d02e101209c32b59c
.exe windows:4 windows x86

e6bf0865dce26b387dd6da39a7458912

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
CreateThread
WaitForSingleObject
ResetEvent
VirtualAlloc
Sleep

user32

wsprintfA

ws2_32

WSACleanup
closesocket
connect
send
recv
socket
gethostbyname
htons

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

msvcrt

free
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
printf
??2@YAPAXI@Z
__CxxFrameHandler
_controlfp
__dllonexit
_onexit
_exit
_XcptFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ