1b5ef523bf3fab35973822f7dbcb2828 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b5ef523bf3fab35973822f7dbcb2828
Size

11KB
MD5

1b5ef523bf3fab35973822f7dbcb2828
SHA1

79cb1c925b382bfecf829b40bc839172e3217a53
SHA256

bc459e9b3e8131d705ffa0f8d751207b575f9b41f86f9969b984ad94c643a9fe
SHA512

ef6b04b770786e70feb114307cd86a1ce73ee415a401cfa2fce78e83d45ac0b807063ccaf9bced7d85436dbc72b31e7f2625459ede23b38056e9fa6e77b5f4fd
SSDEEP

192:yFayUPOUW6V6BxwXOztnKNId47t6ov/3psWmBn6tuddi0itptAG5:aUPON6HIKgsfxuq1tcG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b5ef523bf3fab35973822f7dbcb2828

Files

1b5ef523bf3fab35973822f7dbcb2828
.exe windows:4 windows x86 arch:x86

3c7c3287fc9288d8170604aa453e084d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_stricmp
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
atoi
exit
fflush
fgets
fprintf
fputc
fwrite
memset
printf
puts
setbuf
signal
strerror
strlen
time

ws2_32

WSAGetLastError
WSAStartup
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
recvfrom
select
sendto
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE