183f9c6a3211538cbb6d0f23bfe5f4fa | Triage

Sharing

General

Target

183f9c6a3211538cbb6d0f23bfe5f4fa
Size

34KB
MD5

183f9c6a3211538cbb6d0f23bfe5f4fa
SHA1

4f347961e98e0633b883f900e93dde0a4acebe6e
SHA256

a727e20165af0906d7240175546aa54db9f2e88e2a0c80f7b75c769dc903c4ac
SHA512

ce4b0d28097a1c89ed4e8ab5c14cc17b5d272d1291b4bfc989a7406be43d29b2df115954986bc3149042d48d946affbd928b11b3113260b7f33c8efcfcf258a5
SSDEEP

768:DNfarHvoJpXgdCPK24jyObB3WDEpEAXu:Dsv2pXg8PLDOdeErX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
183f9c6a3211538cbb6d0f23bfe5f4fa

Files

183f9c6a3211538cbb6d0f23bfe5f4fa
.dll .js windows:4 windows x86 arch:x86 polyglot

9e6f275fae66710025b5eda8872d5722

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
memset
strcmp
strstr
strlen
strchr
atoi
printf
sprintf
strncpy

kernel32

CreateThread
Sleep
WinExec
GetTickCount

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

urlmon

URLDownloadToFileA

ws2_32

connect
WSAStartup
closesocket
recv
send
htons
socket
gethostbyname

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ