0804b578a2e5524c0d43d53012b53a03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0804b578a2e5524c0d43d53012b53a03
Size

202KB
MD5

0804b578a2e5524c0d43d53012b53a03
SHA1

066b10e8acf37c5c4da5e08586ab8bc64a3f25c6
SHA256

21c363d8ea5d576cee6e6887d6cb28d2f2391640636a6dcd934546428c829a04
SHA512

bb2ca1503634cf7fe17a5236ca85776994e141f3cec621f0d3464c0cd64ed1b7b3149b58d8b7d16d96c66fda19be0c126b561924e716a0e79b26ee5256609c5e
SSDEEP

3072:u3xLwGj74onUCUV6ahIKnIy2dtkGFN/inOa0PJguIGKPa3YoYMJ27celtZfG53ts:ulVnUBNJGr9a0xDKLPMJ27flHfkvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0804b578a2e5524c0d43d53012b53a03

Files

0804b578a2e5524c0d43d53012b53a03
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_STWNDCloseConnection@4
_STWNDDeleteStateItem@4
_STWNDEndOfRequest@4
_STWNDGetLocalAddress@8
_STWNDGetLocalPort@4
_STWNDGetRemoteAddress@8
_STWNDGetRemotePort@4
_STWNDIsClientConnected@4
_STWNDSendResponse@24

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE