1358fa2555ac84025498c939442c948c | Triage

Sharing

General

Target

1358fa2555ac84025498c939442c948c
Size

21KB
MD5

1358fa2555ac84025498c939442c948c
SHA1

c7b7ea4dedbc75714c18f5638330fbe8d3a416ba
SHA256

013e3397736af3e4ce708d47ec862a9c27006759b6413364c62491c5f1623f45
SHA512

a4fd32f3317db3371f46c5773834a246eddf4e5249e5136a1d956ca748b75c2263b1c3b385fb02c7f0c7a505779534c3a6d015c3b65675ad90eb955fd62de410
SSDEEP

384:isGnXRZJNrhms4x7l8bXMjeELdKqA6xQskjKMm:BwDHrGx72TSewQskXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1358fa2555ac84025498c939442c948c

Files

1358fa2555ac84025498c939442c948c
.exe windows:1 windows x86 arch:x86

41db50321d43c05b28f35bd8757d1595

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

TransmitFile
getsockopt
gethostname
WSACleanup
htonl
bind

msvcrt

??_Fbad_typeid@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
_CIasin
??_U@YAPAXI@Z

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE