58b647b199f217dc91689d2428f98b57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58b647b199f217dc91689d2428f98b57
Size

7KB
MD5

58b647b199f217dc91689d2428f98b57
SHA1

c55af5ad68c26d9f9568772a8bf6a94cccde15f6
SHA256

654fb4174f7ab078bf72daa336891905b90c979f3b3dcbc5e07c81f729c8f5ea
SHA512

fc743676e9b1f4d8c170d4602c45f9de16feb98fa69db2b0c0cecc896b92083c92e0acfa14edfba0e89473bf1a2cc0532e2c53ed898a3292db6e62955aa89682
SSDEEP

192:6E4KuDkyUQn1MKqYExVD1XMJl2tIDjsC:/23UU+PYUKlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58b647b199f217dc91689d2428f98b57

Files

58b647b199f217dc91689d2428f98b57
.exe windows:1 windows x86 arch:x86

1b51dbe324150688ce5e3a0742d34a26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 20B - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE