bd8c4f3437731f7184ad11294bbd6a3c | Triage

Sharing

General

Target

bd8c4f3437731f7184ad11294bbd6a3c
Size

84KB
MD5

bd8c4f3437731f7184ad11294bbd6a3c
SHA1

bc24b9de8bb5cfec010c624b12d4885d1fcb0038
SHA256

e4d47776cfa70b1973d280833d3bc5d7cd8985c2f017a6ee17a5365c6158e35f
SHA512

dd39cbc770c1429fcf3cdeedd2620598812f2c24b336969a437b371ac82e681b726d546658c3c04ee0bada7422332182e3ca0b68450e4fbeaa92f9016ad5ff59
SSDEEP

1536:pN+d9Qqu6MsyFcBMPEWeKP+wdrbuUmQhzMh5fCh+OSWwhvpB/gs:Y9nItPEWeKDJzMih+zZpB/gs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd8c4f3437731f7184ad11294bbd6a3c

Files

bd8c4f3437731f7184ad11294bbd6a3c
.exe windows:4 windows x86 arch:x86

ded3edb311f58c4c6a57f343ec1004ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrlenA
lstrcpyA
lstrcatA
Sleep
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
lstrcmpA
lstrcmpiA
FreeLibrary
GlobalFree
GlobalAlloc

ws2_32

listen
accept
recvfrom
bind
ntohs
sendto
recv
send
htons
connect
WSAGetLastError
select
__WSAFDIsSet
socket
ioctlsocket
setsockopt
shutdown
closesocket
WSACleanup
WSAStartup
inet_addr
gethostname
gethostbyname
inet_ntoa

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
atol
_strlwr
_itoa
strcpy
_beginthread
_endthread
sscanf
strstr
memset
atoi
memcpy
free
malloc
fclose
fwrite
fopen
strncmp
memmove
strlen
isspace
strchr

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ