f651c1e8e7626c1053a60a5e6deeadc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f651c1e8e7626c1053a60a5e6deeadc4
Size

7KB
MD5

f651c1e8e7626c1053a60a5e6deeadc4
SHA1

fe2af255fc1e8464ec27fe664d33f4c051934956
SHA256

3a41755f315b2e3c12a1620b500d90d84724253031f50c07febdaecd5db463c5
SHA512

904405a8cd7e720f65312a962f26166c1193a6a7598ae799e78fb1d84714e3f720773d6bcbdfb1565500d393d97a71040089adb44e3acc77e5555a0ca86ea21b
SSDEEP

96:d+s+er1UAaGk5fh2xutzM3Tryf5BIB7TwimGlDhiGcq19aL:URehUlXAyEk6l9iGf19S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f651c1e8e7626c1053a60a5e6deeadc4

Files

f651c1e8e7626c1053a60a5e6deeadc4
.exe windows:4 windows x86 arch:x86

44d556c36e1d9c63f294329d2a401ef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SetDlgItemTextA
MessageBoxA
GetDlgItemTextA
EndDialog
wsprintfA
DialogBoxParamA

kernel32

lstrcatA
lstrlenA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE