4d42ad7aeb9a116aa4f8f76088ba599b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d42ad7aeb9a116aa4f8f76088ba599b
Size

1KB
MD5

4d42ad7aeb9a116aa4f8f76088ba599b
SHA1

dc6c75064e13e7a1576ac8b08afb29220f4e32ac
SHA256

e484a178a007c58873ea0ce5f6a03d93584294ccaa363446d9f153e18265891a
SHA512

7832b63d92d64d137027d628639991826e9214e6a63f677cb6519bac6c4d8bbb9ca88a1d7818e78a1b05fc5d2a4557f448e9ba2b42305883458276b1a7ca5c83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d42ad7aeb9a116aa4f8f76088ba599b

Files

4d42ad7aeb9a116aa4f8f76088ba599b
.exe windows:4 windows x86 arch:x86

cbff8c9c710d05acda4d7b43a65dcfee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateProcessA
Sleep
GetEnvironmentVariableA

ws2_32

WSACleanup
closesocket
WSASocketA
htons
gethostbyname
WSAStartup
connect

Sections

DNA32r
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE