c13a4cb470b4bbbb6299afe94ebf670a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13a4cb470b4bbbb6299afe94ebf670a
Size

64KB
MD5

c13a4cb470b4bbbb6299afe94ebf670a
SHA1

37ed70e3d31d4bfba3d3ab68619dd908137236ce
SHA256

ac7b9e99b72b0255a814124cb78f3a0370a42b5266b251353fa0e4a95a23dbd3
SHA512

d996de545e23ffc05ab64618a89d3f45e815649446752486a086881b19cdaa6d3b557b71a2c641fc8361ce9757fdf97da333b3040c5d8a2f7783923c9ac7bf3d
SSDEEP

1536:4vY96GZejMuf2XU3+rXMn3BNwOWBak9Sz:4dXj9SU6C37wOWH4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13a4cb470b4bbbb6299afe94ebf670a

Files

c13a4cb470b4bbbb6299afe94ebf670a
.exe windows:4 windows x86 arch:x86

ca1c09b3924702a467fc95f774507ad6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree

user32

MessageBoxA

ws2_32

socket

Sections

.der
Size: - Virtual size: 356KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.der
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE