b546eb93073e7a13cbf5c82d835c15e1 | Triage

Sharing

General

Target

b546eb93073e7a13cbf5c82d835c15e1
Size

24KB
MD5

b546eb93073e7a13cbf5c82d835c15e1
SHA1

4613e060e6c15e9d9ced73e852def24307d6b490
SHA256

46d8e1cfe05f4359d260579277d08a83328cd249285bb7d3107f47965887e910
SHA512

d6e83863acc7c02ff95299ff35a118a50c765e837c5c0295e13a6d1d1b4be33ccca96899d782ff27a7fbfe00b98200720ecc286ff7a57d9d2fc83d5c74b44f62
SSDEEP

192:X/nyyNOhn4qn26ULSTBrQXis/6NuX863JfXmZBdZDhmSiyS4IMT0GSvoHV9iOveX:XfyeCDdVNoRmlzUHtkGloms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b546eb93073e7a13cbf5c82d835c15e1

Files

b546eb93073e7a13cbf5c82d835c15e1
.exe windows:4 windows x86 arch:x86

825aed0d6d8add7e4ebf4dcaa13ddc95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateProcessA
GetEnvironmentVariableA
GetStartupInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetStringTypeW

ws2_32

WSASocketA
inet_addr
htons
connect
closesocket
WSAStartup

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE