b653e3c026825adb6bb8dcd8abd99ab4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b653e3c026825adb6bb8dcd8abd99ab4
Size

4KB
MD5

b653e3c026825adb6bb8dcd8abd99ab4
SHA1

1338d44890d297a22e16b14037e9bf574a80cc66
SHA256

2c7efd9103822bb596a5f41921b19bef7ff72a432472b729a5aedf6552bce957
SHA512

2a7e0fa0345772c23fa3594911e4e53089cc80fcf10a56136e093dbe049cfb311472dfef4709b511b3b1e5191c8f0849b61f438b84f0318f4924ea760add9a83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b653e3c026825adb6bb8dcd8abd99ab4

Files

b653e3c026825adb6bb8dcd8abd99ab4
.exe windows:4 windows x86 arch:x86

36fa862114c4207c82e7819968e25ae5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateProcessA
GetEnvironmentVariableA
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
HeapAlloc
HeapCreate
Sleep
WriteFile
lstrcatA
lstrlenA

user32

wsprintfA

ws2_32

WSAStartup
closesocket
connect
recv
send
socket

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE