044319cb221d04a7feb91cac29cb6a14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044319cb221d04a7feb91cac29cb6a14
Size

839KB
MD5

044319cb221d04a7feb91cac29cb6a14
SHA1

9664964557a72303e807126ef0442ecab4112f35
SHA256

79f64d621f18af913a707b3fd1f24bc572143244d57db8630f92d27825adfa9f
SHA512

88f257259d47d7e6637eefef1131ec811d818839d4801f1d2a2a201b2fabecc776a16f8ace6191a495fee01a0d42e3b4bad776ff65af02bc53a8646769b0127c
SSDEEP

24576:zVU/NOP5OW1P3WRu2cyQ9l0iI0kLnUJ047kB:5UKBm8qQ/20kLTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044319cb221d04a7feb91cac29cb6a14

Files

044319cb221d04a7feb91cac29cb6a14
.exe windows:4 windows x86 arch:x86

0cde561192ae2a0283e46b0c32a279ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

advapi32

RegCloseKey

wsock32

WSAAsyncGetHostByAddr

gdi32

DeleteDC

user32

IsIconic

winmm

timeGetTime

Exports

Exports

@RWinSocket@DispatchProc$qqsp6HWND__uiuil
__GetExceptDLLinfo
___CPPdebugHook

Sections

.fuckoff
Size: - Virtual size: 3.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fuckoff
Size: 838KB - Virtual size: 840KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE