1204ec61c24703527c419640110b0ef1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1204ec61c24703527c419640110b0ef1
Size

7KB
MD5

1204ec61c24703527c419640110b0ef1
SHA1

89a32fc7780e754a9b046fda222fce6d4bee2017
SHA256

80e8d65d1aa75355b5f19ff72c2fada6c785a6ac964fe748a088124a23d4678a
SHA512

8c67a871a42f1c4affbeb8b8076079bb74e217efadcd6899c68c04ed823ec9df1c29f2d9f136f60d11a745bdf832b55ba604369fe6d7fdf554d8734255281f7e
SSDEEP

96:4eT4X5YewtEYMA4v0AneXEVDGEJmCwb++eiQL2nEcnUKFZ:VcXW9iY/+e0VpJPyptHUK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1204ec61c24703527c419640110b0ef1

Files

1204ec61c24703527c419640110b0ef1
.exe windows:4 windows x86 arch:x86

04624843a73faf1fe748b798d5680ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
SetTimer

kernel32

lstrlenA
lstrcatA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
gethostbyname
htons
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ