05b5153a0a86cdf789b69fa662795795 | Triage

Sharing

General

Target

05b5153a0a86cdf789b69fa662795795
Size

60KB
MD5

05b5153a0a86cdf789b69fa662795795
SHA1

663ce70bd2c42f086c7b93b6f0340acc9f9d6d1c
SHA256

3ecc88a1dc61dfcb009e9fe77972f46065dc071bed934fa179186dae066ca73c
SHA512

46ddb3627746804a8f87180eee55be4047214651b80f1eb8b47652103d465120284dfa11b2cef5917b9ab581bb22868c1ed414df6f30fa39dfcbbc245e87b78a
SSDEEP

768:4XjYkjGg/Qdb8kVfuZO6a/xAzvm2aZrf8qE6OrQ61m/mAbZ4owOsnxdbrW6v+T:4XjYkj4db8kJuZQJnreqf/Pd3wP2G2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05b5153a0a86cdf789b69fa662795795

Files

05b5153a0a86cdf789b69fa662795795
.exe windows:4 windows x86 arch:x86

63fd4207a5eb46790adb968e61d5e7d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrlenA
lstrcpyA
lstrcatA
Sleep
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcmpA
lstrcmpiA

ws2_32

listen
accept
ntohs
sendto
inet_addr
send
htons
connect
WSAGetLastError
select
__WSAFDIsSet
socket
ioctlsocket
setsockopt
shutdown
closesocket
recv
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_ntoa
bind

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
atol
_strlwr
_itoa
_stricmp
strchr
_strupr
strncmp
strstr
memset
atoi
memcpy
free
malloc
fclose
fwrite
fopen

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE