257e2e418d2293b9f686543fec1a4e40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257e2e418d2293b9f686543fec1a4e40
Size

13KB
MD5

257e2e418d2293b9f686543fec1a4e40
SHA1

af052ba7c4f0a0face92876116396e9988b712d3
SHA256

7816c92d2aecc8e9b6379d1644945b2559364f9cc7e771a248f42cf6bf670d2b
SHA512

867880a667ad9f3fd06465833298ac235bd68227391011550084302b53febda2b9e0f10ebe863749a358073deacac1dff495fe2a4ad4e94626bf66ded23cd52d
SSDEEP

192:48dwHvR2VaIL8Oibyt5RyF4YVxaLL3BSDjKGn4r+stxOfEPg69lX:FWZXuOQpYVxaf3hsfmg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257e2e418d2293b9f686543fec1a4e40

Files

257e2e418d2293b9f686543fec1a4e40
.exe windows:4 windows x86 arch:x86

e31561f042ba59e857bc213faa3bee93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
SetDlgItemTextA
MessageBoxA
KillTimer
GetDlgItemTextA
GetDlgItem
wsprintfA
EndDialog
DialogBoxParamA
SetTimer

kernel32

RtlZeroMemory
lstrlenA
lstrcatA
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSACleanup
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ