7d98952cd7fc122982791279e6008af1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d98952cd7fc122982791279e6008af1
Size

293KB
MD5

7d98952cd7fc122982791279e6008af1
SHA1

d7d28d42806db27cf82c8758370cf23159f25f50
SHA256

6c32174486d6654f9e53da62e4a55a7c1048edfefa6eeb72f63d2ebc431b6745
SHA512

1933f8a330cfe05fafd94d3e1fd1a706fa91d554d830cfb10583b95b283275b1df7a1118c701dc047385696fac10f31eb2bdced1a7708f22af262b625ed65137
SSDEEP

6144:YhOi5cnSSrwzJ3MquRw4bD09REOYzxPIvOBYtdzd8WaPohzymXT9xe4:li5QOWPmtnBTW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d98952cd7fc122982791279e6008af1

Files

7d98952cd7fc122982791279e6008af1
.exe windows:4 windows x86 arch:x86

ed78263312241114bb031b98efcbe981

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

atoi
bzero
calloc
close
connect
dll_crt0__FP11per_process
dll_dllcrt0
dll_noncygwin_dllcrt0
exit
fflush
free
gethostbyname
htons
inet_addr
__main
malloc
memcpy
perror
printf
realloc
socket
__swbuf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ