7c4150b637d3204239db5e8cc7c69fee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c4150b637d3204239db5e8cc7c69fee
Size

6KB
MD5

7c4150b637d3204239db5e8cc7c69fee
SHA1

43e43af64001d636876885c6f73a1125fd6d4775
SHA256

619c01dfaec22994e450e2bba84365a9fd1882710006e19b31ce972b82f8a6ca
SHA512

85535926ba0f53dd4f1044ba1a2574ffd965696e7d991fdc10bd6ebd556cc06b2d1dc324d1a0dc3b0a9a1bd6acd90cbd9cde137be1b08ad47f2bfd1d3b8651d7
SSDEEP

96:ZGEHbyUtN/8KUQ/1nza3x/oS3e5hiGciHT62J:cc+UtNUKUQ/Wx/dOziGTHT62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c4150b637d3204239db5e8cc7c69fee

Files

7c4150b637d3204239db5e8cc7c69fee
.exe windows:4 windows x86 arch:x86

44d556c36e1d9c63f294329d2a401ef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SetDlgItemTextA
MessageBoxA
GetDlgItemTextA
EndDialog
wsprintfA
DialogBoxParamA

kernel32

lstrcatA
lstrlenA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ