13a63acb351c36c2e83d5416ae5a3603 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a63acb351c36c2e83d5416ae5a3603
Size

72KB
MD5

13a63acb351c36c2e83d5416ae5a3603
SHA1

b7862675c70a16ab699c2d97b207ba5cf1aa8e1f
SHA256

7dd9253d18c7c2e8cff36e762aaa2ecd4330d223e34bb88cadb1d261ef6e9e8f
SHA512

6ffa614a2daf08e932967b2c2437c6cc9ff59b9aaede46e2170c240fdd2470446de1f2cab8914382716998c064e2f6f30b657910643dcf1de2ad484dc7e4825b
SSDEEP

768:SeCC/OCAIL5ys65iqQ1QierKRjMaor84euKBz1s0PF+Yly7kOUklgBeYgXk:S1C+ILnmDJDr0jMXryuwCK02ynlC+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a63acb351c36c2e83d5416ae5a3603

Files

13a63acb351c36c2e83d5416ae5a3603
.exe windows:4 windows x86 arch:x86

a2967ba932bd938adf3c9dbadeb98faa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrlenA
lstrcpyA
lstrcatA
Sleep
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
lstrcmpA
lstrcmpiA

ws2_32

listen
accept
recvfrom
bind
ntohs
sendto
recv
send
htons
connect
WSAGetLastError
select
__WSAFDIsSet
socket
ioctlsocket
setsockopt
shutdown
closesocket
WSACleanup
WSAStartup
inet_addr
gethostname
gethostbyname
inet_ntoa

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
atol
_strlwr
_itoa
_stricmp
strcpy
_beginthread
_endthread
strchr
isspace
strstr
memset
atoi
memcpy
free
malloc
fclose
fwrite
fopen
strncmp
memmove
strlen

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE