968080295cc432f1dcc3d6d1ba1dd20f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

968080295cc432f1dcc3d6d1ba1dd20f
Size

16KB
MD5

968080295cc432f1dcc3d6d1ba1dd20f
SHA1

991d1c865520c68ba05e7686f12044eddc69f314
SHA256

89b59b3f920f8211e93864a65f36999f065b1082ac5b538b120e7307f6b8be48
SHA512

9b18e353589dde65add0bd30484c2ae8f29b94c7a9a62192ec30ec294bd0d246abed407038f88e43802d8fb5ae2d9f925c84ba4c2155228c1e04521b77fb4a2b
SSDEEP

384:flSdVSw5YCZhJ+kK3i+ZY46i8IUpZRVa0iaVncfGn1:9SdVSw5H+vnZ/8IUpZszfG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968080295cc432f1dcc3d6d1ba1dd20f

Files

968080295cc432f1dcc3d6d1ba1dd20f
.exe windows:4 windows x86 arch:x86

06be80236f34505a919cf7288a0331a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LoadLibraryA
GetProcAddress
lstrcatA
lstrcpyA
CreateProcessA
GetVolumeInformationA
GetTempFileNameA
Sleep
GetModuleFileNameA
GetTempPathA
CreateThread
GlobalAlloc
SetFileAttributesA
GetDriveTypeA
GetLogicalDriveStringsA
GetTickCount
ExitProcess
GetLastError
CreateFileMappingA
SetErrorMode
DeleteFileA
GetStartupInfoA
GetModuleHandleA

ws2_32

gethostname
bind
listen
accept
gethostbyname
shutdown
recv

msvcrt

_strdup
_controlfp
__set_app_type
sprintf
atoi
toupper
strstr
malloc
_except_handler3
fclose
ftell
fseek
fopen
fwrite
fputs
fread
memset
strlen
abs
strcat
rand
strcpy
strrchr
strcmp
strtok
free
srand
__p___argv
__p___argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strcmpi

Sections

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE