a4d8d853bca8e750a56bdecfa5c71d340e5320d95151949ba43d1565f0e336af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4d8d853bca8e750a56bdecfa5c71d340e5320d95151949ba43d1565f0e336af
Size

15KB
MD5

9ce34aca822a081a5b036587f0c5fc9c
SHA1

c5a1e0d09ea53b958d9714a35f946165c4d24ce6
SHA256

a4d8d853bca8e750a56bdecfa5c71d340e5320d95151949ba43d1565f0e336af
SHA512

e13da2aabb553406cb452781bd0a3ace9f227d1c0cfa9d8114e549fb92954e3bb2b457b9e0f09130499d99af0454b9efdab3bbc0b77920eab67c39c2fd37882e
SSDEEP

384:cVcH/mNr4vw666sK/PJR5uxy/Hqs91vZI:cCfm24666scJRL1vZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4d8d853bca8e750a56bdecfa5c71d340e5320d95151949ba43d1565f0e336af

Files

a4d8d853bca8e750a56bdecfa5c71d340e5320d95151949ba43d1565f0e336af
.exe windows:4 windows x86

7d3e7212d11cb8d1f48e933650b0a45e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
Sleep
CloseHandle
lstrlenA
CreateThread
WaitForSingleObject
ResetEvent
VirtualAlloc

ws2_32

gethostbyname
recv
closesocket
WSACleanup
WSAStartup
send
connect
socket
htons

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

msvcrt

_adjust_fdiv
__setusermatherr
_controlfp
__p__commode
__getmainargs
__p___initenv
exit
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_initterm
atoi
strchr
??2@YAPAXI@Z
printf
__CxxFrameHandler
free
__dllonexit
_onexit
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ