241b525195a5b13d67ca37a931f0dd1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

241b525195a5b13d67ca37a931f0dd1b
Size

2KB
MD5

241b525195a5b13d67ca37a931f0dd1b
SHA1

94a5638fcba594417d7c91984fd44a1680a47f89
SHA256

bbe3c5e4347ac2b0542ac8915e0e019d4294ddfba5fece478c2c56d7a11e8a48
SHA512

5a10986e6d6fe73928d9bc03062cefadab1dd4a0dff518006c038ec4ca3dc64ac849506b07d8d762adc4d359999e80e66e640b7fc1cc8fc2496632c4f70e8e62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241b525195a5b13d67ca37a931f0dd1b

Files

241b525195a5b13d67ca37a931f0dd1b
.exe windows:4 windows x86 arch:x86

0cd7d7c53e328744bf210cd7e2680ab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetProcAddress
LoadLibraryA
OpenFile
OpenMutexA
Sleep
WinExec
WriteFile

wsock32

socket
send
recv
connect

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE