cc23a9ce5d1b05c51c7435b075015b5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc23a9ce5d1b05c51c7435b075015b5f
Size

36KB
MD5

cc23a9ce5d1b05c51c7435b075015b5f
SHA1

36b89ede6271bc14ecc61fe63cf05d53f884c399
SHA256

8ca69255d3a91658f52b837327af7f55dbe755ed13602b23f3882a8d429dc5f0
SHA512

34204e4f79141f1e8cda85cfa15fad904956ef406f532da3785423a6513c97d10b931982c863aad3fc9a4bddbfc0091354e473e5c6a358f7ddeb182ace8d700d
SSDEEP

384:pUgz+TdmSG3Bf6vLRSsLmlLGXGNyLsisMglu0f3gtJoKVBR:HAdmvBkLRSDGWWfglucy2KbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc23a9ce5d1b05c51c7435b075015b5f

Files

cc23a9ce5d1b05c51c7435b075015b5f
.exe windows:4 windows x86 arch:x86

5a76c2a0de6114ebfbf2fd5af10f73a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
htons
inet_addr
socket
connect
send
select
recv
closesocket

kernel32

RtlUnwind
HeapFree
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
CloseHandle
WriteFile
GetLastError
ReadFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetFilePointer
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE