4d518889f51935554e6d68e2bac27738 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d518889f51935554e6d68e2bac27738
Size

16KB
MD5

4d518889f51935554e6d68e2bac27738
SHA1

0367e4746f6a18fedfa0d16f8a73ad2ea43fb12e
SHA256

7864e0f98e9bfa3a033292aa6a622eeab91835c8e72eb2925467a71d64601085
SHA512

c301f23f1330b385ec0890e649f31fafc5e8f72478c93726b1c583bfcccb05a6d8beb9063cd5abd23aac15a1494f67b68f44a1616ef104f14dce5e58ebf9a4ac
SSDEEP

384:ghilwLI9nUQuitqH5+NrdJtWcZlo4pDMc:gDI9fBNr77Zm2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d518889f51935554e6d68e2bac27738

Files

4d518889f51935554e6d68e2bac27738
.exe windows:1 windows x86 arch:x86

41db50321d43c05b28f35bd8757d1595

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

TransmitFile
getsockopt
gethostname
WSACleanup
htonl
bind

msvcrt

??_Fbad_typeid@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
_CIasin
??_U@YAPAXI@Z

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE