6cf2452b8e217aeb0e6f42270c76cfcb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cf2452b8e217aeb0e6f42270c76cfcb
Size

7KB
MD5

6cf2452b8e217aeb0e6f42270c76cfcb
SHA1

17a04eaf5e4a7f4d1a1d74437308cbf4f8498ecd
SHA256

e41262109777996e67955a2934be280e7d873af7f5769450c37f4a46091ff21c
SHA512

d23468beb5808b32e9be359733b16069c8b3ef74033b66ded37ef7b1b90f5ffec9314d31c1f153b28438a20bcd4b84bc684156f72c4a5fd34f1f990ad52fcad7
SSDEEP

96:jTQvMKPe8PVHB/Lbipr4Pvjk9TCMy1H2fM4LQ3hKaQLs7Qi:vgMKPeENJL2BykpCMyeD2BMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cf2452b8e217aeb0e6f42270c76cfcb

Files

6cf2452b8e217aeb0e6f42270c76cfcb
.exe windows:4 windows x86 arch:x86

d32cb9e6081f930e60ddf5ffb3323e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ