613aef50c11ce97e161c352a395d6a60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

613aef50c11ce97e161c352a395d6a60
Size

144KB
MD5

613aef50c11ce97e161c352a395d6a60
SHA1

5686def7ffc4de42b8966cab38f93f9a88961884
SHA256

55606edc95c26d6560d3013688891be657eefe2584a87a6572bd0b8b9de569af
SHA512

f750d8a860d65a5c49b4a2301c2bfa9a88f0efa91497d40af7e9bbd4e8cda5c54e868fddc52bee93a7b5d2025dc87fb315ea36c0319234fdd19dbee6ad25fcb0
SSDEEP

3072:hnGZ0K9nCdFloV5R5RadXed24dQv8t3ZL8k5:wnhCdFqVr5z24Sk9Z8k5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
613aef50c11ce97e161c352a395d6a60

Files

613aef50c11ce97e161c352a395d6a60
.exe windows:5 windows x86 arch:x86

0412a4b90fc50a8ff81fc91cfcf0edd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

snmpapi

SnmpUtilMemAlloc
SnmpUtilMemFree

wsock32

WSAStartup
ioctlsocket
gethostbyname

msvcrt

exit
toupper
__p__pctype
_isctype
__p___mb_cur_max
sprintf
time
fprintf
__p__iob
sscanf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_setmode
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

kernel32

FormatMessageA
GetProcAddress
LoadLibraryA
LocalFree
GetLastError

user32

CharToOemA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ