b423f320d54f9677c8a050e72cb53e58 | Triage

Sharing

General

Target

b423f320d54f9677c8a050e72cb53e58
Size

6KB
MD5

b423f320d54f9677c8a050e72cb53e58
SHA1

48db7f9304f05797f745a82141fa5978f8b5fb51
SHA256

b429fe7bb3adaee937d0459c36351a9c37dfe2cc69c76adbca67a04af3554ad8
SHA512

e7bf2677f004ee1f5f919e0ccac6ae955edcbafe5119174083669b44d6d5fc813bf379b92f439d20814d74a27f791f939beae3350ebc39b138cadfbcf2941962
SSDEEP

96:jz5tjBFyllLNt8w+vrpwCsJVUTOzMTQr6MrvGwh4p:fPjnyx/8BJsPUTOzMTkhrewCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b423f320d54f9677c8a050e72cb53e58

Files

b423f320d54f9677c8a050e72cb53e58
.exe windows:1 windows x86 arch:x86

1b51dbe324150688ce5e3a0742d34a26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx

Sections

.text
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 20B - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE