b8de551a4834ae8c2f6b7799de9492cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8de551a4834ae8c2f6b7799de9492cc
Size

24KB
MD5

b8de551a4834ae8c2f6b7799de9492cc
SHA1

9d1834682723b658c46716e7f75cb99a70810d77
SHA256

3fdee621848b034f154f4dd8c870ef2d7dd3f51dac8f113d32fdaf5b1b14010a
SHA512

e60405ba1bdae5e119c9bbd358b5a29890cad03d6ac3e6ea0586fcdd6ce4f0886e9d86bdba83aa007e2c4bdf2368e65e39b6c6fc666192f0e06d50dff02661b8
SSDEEP

384:b6mVAjXL3bUWP9W99difG+QU0nFkQYUPGiwE7NBa7vx7hVW566i/JZb:pVAjDhP9I9dNLjFkaP3BB+VVW566+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8de551a4834ae8c2f6b7799de9492cc

Files

b8de551a4834ae8c2f6b7799de9492cc
.exe windows:1 windows x86 arch:x86

20c5398890dadf44902342d7dcef6c32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

GetNameByTypeW
htons
shutdown
socket
WEP
WSARecvEx
NPLoadNameSpaces

urlmon

WriteHitLogging
CopyBindInfo
URLDownloadW
CoInstall
AsyncGetClassBits
RegisterFormatEnumerator
GetClassURL

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE