743754a7610c0251d04ee77989db36c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

743754a7610c0251d04ee77989db36c2
Size

206KB
MD5

743754a7610c0251d04ee77989db36c2
SHA1

a1e63e216356ddecabf74a9edcd34340bc64265b
SHA256

697bf1be4cc11834c4736e4479525ba6ee0f0cb2c1be385b1b3cd5f1089743d8
SHA512

011491395e72b6a9cb110ff875f2df6225a84907cc74845232c3a775f90b9f8a9a7ebbf3d63a37064e6474d0ab1636ac1962ad01d4128eb5501b2cc65ddb24e5
SSDEEP

6144:UcRzS3n3JuhsspPeUHjQH3NjcEPqVBmdGhkU0Ksn:HRzS3n3JugQjQX6EPqvZhkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
743754a7610c0251d04ee77989db36c2

Files

743754a7610c0251d04ee77989db36c2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_STWNDCloseConnection@4
_STWNDDeleteStateItem@4
_STWNDEndOfRequest@4
_STWNDGetLocalAddress@8
_STWNDGetLocalPort@4
_STWNDGetRemoteAddress@8
_STWNDGetRemotePort@4
_STWNDIsClientConnected@4
_STWNDSendResponse@24

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE