97665469d2ed5aea443c7c0be9254677 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97665469d2ed5aea443c7c0be9254677
Size

17KB
MD5

97665469d2ed5aea443c7c0be9254677
SHA1

eb9da7c0bd2651a9fd0d43c6ffd485d223def05b
SHA256

991d82a6de788c419de7235dcc6b51d6a430ef01f5e39493b2579976a0a02f42
SHA512

60874d0dcdaa7a641f0492058d9dee22fc58cf9cb2ebb3cb5bcc9fc37afb5134c3291fcfce7d910094a87df697a6375c1bb634a899867e64eac474eb335577b7
SSDEEP

192:yrOzdVsSzIulZW1omh8uNhQRHopxw3PCPx+VHtDaXZEQU7X9VPkeRd7A2q:yOzDjDEomlbxJkVHteXZPWHU2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97665469d2ed5aea443c7c0be9254677

Files

97665469d2ed5aea443c7c0be9254677
.exe windows:1 windows x86 arch:x86

e6702c60f71f270c36bbf72530d576d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
connect
gethostbyname
htons
recv
send
shutdown
socket

kernel32

RtlUnwind

crtdll

_iob
__GetMainArgs
exit
fprintf
memcpy
memset
raise
signal
sscanf
strlen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 904B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 692B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE