6c7eef6579610090afaff4ab945c0684 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c7eef6579610090afaff4ab945c0684
Size

7KB
MD5

6c7eef6579610090afaff4ab945c0684
SHA1

7243d48548b402604dd1f9bf539eda84582f5939
SHA256

3bb741e2907f4545b7802af946f87518877b1d3f1f02bf9bc717e06c3eb39995
SHA512

b0669d13665745a90571d57a994917f034cf8829a904cfeb793f1d89b552ef477fc1c9fcb5825bd655437e37ba14e56d5987ebfe2ba9056e8dd816fe75c745e2
SSDEEP

96:YeT4X5YewtEYMA4v0AneXEVDGEJmCwb++eiQL2nEI0nJHZ:1cXW9iY/+e0VpJPypt4J5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c7eef6579610090afaff4ab945c0684

Files

6c7eef6579610090afaff4ab945c0684
.exe windows:4 windows x86 arch:x86

04624843a73faf1fe748b798d5680ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
gethostbyname
htons
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ