c2ef158b4d7138c6c18437a8b636fb76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2ef158b4d7138c6c18437a8b636fb76
Size

6KB
MD5

c2ef158b4d7138c6c18437a8b636fb76
SHA1

a880e3454989a45bf3b44b26d08c40e8b1f1cfb1
SHA256

dc5319d16cd34be3361a64a5965dee0815ccee784c05ae488224019bf7da4c5a
SHA512

2cc0bfe9239f51f7ab6a631aa6198d6a0faca6819c70dd6e95621ca0812ca7475a6562074034d3cfa2dd4a6f67bf5e7a0444ff10f634d737dc598d2ebab2673d
SSDEEP

24:ZHGSt+jsZMPIZJneIpbTLB2JhThr3sh/:Zvt+AZoEtZjBEhThYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2ef158b4d7138c6c18437a8b636fb76

Files

c2ef158b4d7138c6c18437a8b636fb76
.exe windows:1 windows x86 arch:x86

59d3b4398a2c161c1a4d82284700d5bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrlenA
ExitProcess
GetComputerNameA

ws2_32

WSAStartup
socket
inet_addr
htons
connect
send
WSACleanup

Sections

.flat
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE