4788f655c66c3cbdd8eb9b70f1ceeee5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4788f655c66c3cbdd8eb9b70f1ceeee5
Size

7KB
MD5

4788f655c66c3cbdd8eb9b70f1ceeee5
SHA1

92a0c6405b5e8a57d593c5c940b0bf968d742b54
SHA256

cfe5f4dbe3478b64d93946f66d3495575d5da9840d37fa4c2de4963eb903a65f
SHA512

4b7060d47c231db37780a03e617ca41bdfefbeafe291ecb7a74ef6af238d7d84565078216e618b8a382c928bd7218032705a578c3a8e9c9bbd32c8477044baec
SSDEEP

24:ZHGSttTQqS9RFcqtpKzcDUnSfX6lbOXLB2N4i3sh/+c5c6:ZvtBQbsqtMzcDUnh18BRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4788f655c66c3cbdd8eb9b70f1ceeee5

Files

4788f655c66c3cbdd8eb9b70f1ceeee5
.exe windows:1 windows x86 arch:x86

d800d5035fa7a473f080a1102eecc6db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrlenA
ExitProcess
GetComputerNameA

ws2_32

WSAStartup
socket
inet_addr
htons
connect
send
WSACleanup

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.flat
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 311B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE