71a31c6e55eff19507d271a98bc3e225 | Triage

Sharing

General

Target

71a31c6e55eff19507d271a98bc3e225
Size

18KB
MD5

71a31c6e55eff19507d271a98bc3e225
SHA1

545628030264c3924d44db0cfa4f136fc735d1e3
SHA256

48fbcffe058437541c881eb0fc2186b41dd2eb657b8588ad17230e0d73945c17
SHA512

ec666dad888b894343ecfb0b5f7fcf3d708d7786d3241f122ea7230016720ef9b9ef7d95900b42957a42963ae0aa23a3b7fad0316c1066cc92ceb0e7ae866bc4
SSDEEP

192:W7rlHktL0LdLRy7c7VODc9b35oiC6jQ5AkkaBFUogz0CD1S:W7cKdLM47VOqdCUQ5xfBGogzTRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a31c6e55eff19507d271a98bc3e225

Files

71a31c6e55eff19507d271a98bc3e225
.exe windows:4 windows x86 arch:x86

27309af8f8df3cd41b430ee06c95be7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

FtpGetFileA
InternetConnectA
InternetOpenA

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

shell32

ShellExecuteA

user32

FindWindowA
ShowWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE