c54b5b24fc8639cde7cf5d443e628a36 | Triage

Sharing

General

Target

c54b5b24fc8639cde7cf5d443e628a36
Size

8KB
MD5

c54b5b24fc8639cde7cf5d443e628a36
SHA1

7c931dbe47773f40a81037f771f434b74e6c27db
SHA256

8f87ca8473857959e6d708fe25411248c1607d3c3192ec76148227b0e94bf969
SHA512

006be5fcfab19e5e3b3477187da2c79f1f10baf5dac852b7076c3fbed8fc1f2491d4f3bf0b3376a251d68e4bf2f21fbdc4206f617f5c103ce1951b4651714cd3
SSDEEP

192:fFNe4bUxhCoPo5vnU9BwATU11qa/ryD/0r34/C:tM4YxhdoxU9maR/0r34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c54b5b24fc8639cde7cf5d443e628a36

Files

c54b5b24fc8639cde7cf5d443e628a36
.exe windows:1 windows x86 arch:x86

1b51dbe324150688ce5e3a0742d34a26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname

urlmon

ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE