aa31033e921f5fc3b66b5c833bd35c77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa31033e921f5fc3b66b5c833bd35c77
Size

295KB
MD5

aa31033e921f5fc3b66b5c833bd35c77
SHA1

5e35c47cf6ac90bb28e61f9df74d9d1f15d5f344
SHA256

788ec493f7030fb4e0d7079eb584c114a27063c9da55bd6b8bb3307307fba807
SHA512

a3ba8bf915054dbacbf5cd0beff11b9fbbe575a5634ff50d6f68fc573733f6ab43bd66f9500a44dd0ea6c86021bf20ca022aae7fba757de2ff61dacc3fdd1228
SSDEEP

6144:pNkhOi5KRSSrwzJ3MquRw4bD09REOYzxPIvOBYtdzd8WaPohzymXT9xnm:pN5i5UOWPmtnBT/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa31033e921f5fc3b66b5c833bd35c77

Files

aa31033e921f5fc3b66b5c833bd35c77
.exe windows:4 windows x86 arch:x86

b0a1df9e27bcc74b9dda8e50ac6f198e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cygwin1

atoi
bzero
calloc
connect
__errno
dll_crt0__FP11per_process
dll_dllcrt0
dll_noncygwin_dllcrt0
exit
fflush
fprintf
free
gethostbyname
htons
inet_addr
__main
malloc
memcpy
perror
printf
read
realloc
select
socket
strerror
strlen
write

kernel32

GetModuleHandleA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ