0d993602c732ffe1bd60a85b578e4e07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d993602c732ffe1bd60a85b578e4e07
Size

72KB
MD5

0d993602c732ffe1bd60a85b578e4e07
SHA1

4604d67a60c798fb562df96f45571e6f5dfca8d2
SHA256

36d8c976ffef1b71d8f203009afd1a32ce94a93514adf777bfb12cbbdf8da57f
SHA512

9a3711f3a7cc0b3d8bc653dad22989d5aa9f21fad1d2becb36774e267ec3de5e9363a8f9ebfb00b22d20727a1a4130797d22b3812eaf4c44daa0cc8b347b6e26
SSDEEP

768:2FJEZIz3yC9kpldgF0VFVhVAK9GoXzIFZ9LsEsUjceR5wdtJb2Su8rqxEUmEN6Xx:AMQCCCpgF+70Fn9iUjBR5UJbRJqxOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d993602c732ffe1bd60a85b578e4e07

Files

0d993602c732ffe1bd60a85b578e4e07
.dll windows:5 windows x86 arch:x86

687ef59c73796ebd1a7a9cec7e2a3c2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

getenv
free
_initterm
malloc
_adjust_fdiv
strchr
strncpy

kernel32

Sleep
GetLastError
WideCharToMultiByte
GetComputerNameA
MultiByteToWideChar

ws2_32

getsockopt
select
__WSAFDIsSet
ioctlsocket
connect
send
WSAGetLastError
socket
WSACleanup
WSAStartup
closesocket
bind

mswsock

WSARecvEx

Exports

Exports

ConnectionCheckForData
ConnectionClose
ConnectionError
ConnectionErrorW
ConnectionMode
ConnectionObjectSize
ConnectionOpen
ConnectionOpenW
ConnectionRead
ConnectionServerEnum
ConnectionServerEnumW
ConnectionStatus
ConnectionTransact
ConnectionVer
ConnectionWrite
ConnectionWriteOOB

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ