d5965fb7bd20f1d59b0f5d56345167f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5965fb7bd20f1d59b0f5d56345167f2
Size

10KB
MD5

d5965fb7bd20f1d59b0f5d56345167f2
SHA1

d32ac9a50d1c7e46d445dca0c51fe32344a40ecb
SHA256

488ee11a668ece399fb57f8a79499009370df0ad7d7660b4bb59044eb5f3f5af
SHA512

8a33cdb2727d4161bad2b2e5370a0fb0b45b4d022fe061542c1d4f8305c9dde9824014f02e76ef3ad2a59ef7929402badb1506a1fab61693803bcf2539a26574
SSDEEP

96:AIDeWyxCJGhB9LNmYBGIEmN2nKqEklEVJDu/4UaPbTjfI9oMH3D9QeVdhIdZdCd6:RatxbT9xmYscN9cpPdQUE139u7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5965fb7bd20f1d59b0f5d56345167f2

Files

d5965fb7bd20f1d59b0f5d56345167f2
.exe windows:4 windows x86 arch:x86

03ada0e9e4c16774026a35e58253f11c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
_impure_ptr
calloc
connect
cygwin_internal
dll_crt0__FP11per_process
free
htons
inet_addr
malloc
printf
realloc
scanf
send
socket

kernel32

GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE