62d7e4cfe74b9d36b60bb1ad3d963701 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62d7e4cfe74b9d36b60bb1ad3d963701
Size

15KB
MD5

62d7e4cfe74b9d36b60bb1ad3d963701
SHA1

15e914eeabd541c58021c2c59cbc3a21e446439b
SHA256

cf2481543bd790cde477876e5d2813fef050186197c525f2c938913a957ef1bb
SHA512

304fb29c5e2285c8cd7b41509104acabc65431902ec30bfb1e7985eb9ad8072caa10731eb05b8cdd3ac29e323cefd8dae689ea9e2383212c7591cc0fcaf71ee8
SSDEEP

384:NGEnIrrr5N3cUOCwk85Oy2ZrllHbh7+fg:cwIfskw3j2Z/h7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d7e4cfe74b9d36b60bb1ad3d963701

Files

62d7e4cfe74b9d36b60bb1ad3d963701
.exe windows:1 windows x86 arch:x86

77ed1375d9d38b3b88bdebae2415b497

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

htonl
SetServiceA
gethostbyaddr
listen
closesocket
accept
bind
htons
sethostname

urlmon

IsAsyncMoniker
IsValidURL
URLDownloadW
ZonesReInit
DllCanUnloadNow
Extract
CreateAsyncBindCtx

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE