0594ec500fb4e401cc28b575ed34d84c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0594ec500fb4e401cc28b575ed34d84c
Size

6KB
MD5

0594ec500fb4e401cc28b575ed34d84c
SHA1

34c9f9d77f35bab9f5506e647cb122742d08743f
SHA256

43b921e2e8f4253c6cd235ba9c7d1c01efac7a2679c6644f18e1bd05a558743e
SHA512

3d37f209682cb9b7134e636d7c506a24e69cabec4055b089b75d58c62f063244bd6a4932b1d64fbd29760bd88d9b4fd689891053a0eafeb2e8657187a2f15d97
SSDEEP

96:9sGm2iQZkskTbgsnPRyT1jkY5LynxOC0T9CkTfyPVj+B:9NSsElnoTtkYUnEC0T9CkTyPV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0594ec500fb4e401cc28b575ed34d84c

Files

0594ec500fb4e401cc28b575ed34d84c
.dll windows:4 windows x86 arch:x86

11b72b460bd247f719b5b1bdf9440c38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

socket
WSAGetLastError
htons
inet_ntoa
connect
select
__WSAFDIsSet
getsockopt
setsockopt
shutdown
closesocket
WSAStartup
inet_addr
ioctlsocket

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

kernel32

WinExec
GetTickCount
ExitProcess
Sleep
GetSystemDirectoryA

user32

GetMessageA
DispatchMessageA
TranslateMessage

msvcrt

_initterm
free
strncmp
strcpy
strcat
strstr
_ftol
_beginthread
malloc
fwrite
vsprintf
printf
fopen
fclose
_adjust_fdiv
memset

Exports

Exports

load

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ