8b4a67051ba8c764560e5290113cdaec | Triage

Sharing

General

Target

8b4a67051ba8c764560e5290113cdaec
Size

10KB
MD5

8b4a67051ba8c764560e5290113cdaec
SHA1

a812f2c0b4054df4c8462ad13d009f63bc1703b5
SHA256

a9731147fa9599edb1bb77d87b0e535f1c4b5323f21a695350e0035048507ba0
SHA512

d3b83ef98ec9d1cbdac3321725518999a95a0890356cbeb19153ca724cd97889d23ea29e4b07445adfbf601386b2dcdcaaa7fbfc230dfd31f947b6e968f5a796
SSDEEP

192:HMaaHIUW6V6BxwXCZ5xiO/GdapsWmBn6gghCfiNk0:UHIN6ekOZR4iNk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4a67051ba8c764560e5290113cdaec

Files

8b4a67051ba8c764560e5290113cdaec
.exe windows:4 windows x86 arch:x86

f2692a162ddf21270922ae0de900a431

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetVersionExA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
exit
fprintf
fwrite
malloc
memcpy
printf
setbuf
signal
strerror
tolower

ws2_32

WSAGetLastError
WSAStartup
bind
closesocket
connect
gethostbyname
gethostname
getsockname
htons
inet_ntoa
ntohl
ntohs
recvfrom
sendto
setsockopt
socket

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE