d5c8cc65d95b31f15dd6ef1477d84fec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c8cc65d95b31f15dd6ef1477d84fec
Size

28KB
MD5

d5c8cc65d95b31f15dd6ef1477d84fec
SHA1

d08c252e5f06f2876b07fd46b1a4c64a8240dfca
SHA256

df0d4aa51ff0e0701c9226bccf2138d8e8a77f64811fb1eb73ad7085362ecdbc
SHA512

b3fe64a9ef8d972fd2174242586f96bad28566994134ff6b5332b2edc5121647a7cb4fa6f65d293d8da2d46d2d8a739d17b8482dd79c31886695bae895db113e
SSDEEP

768:luu2ip/524F3F8yp0W8qhpkwEUZYtqQNDWwIj:QZ0/M4FVhpMqhpnqDWwIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c8cc65d95b31f15dd6ef1477d84fec

Files

d5c8cc65d95b31f15dd6ef1477d84fec
.exe windows:4 windows x86 arch:x86

fd1283de6bb33d677c508a5f051dc414

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DllRegisterServer
InternalExtractIconListA
DAD_DragMove
CheckEscapesA
IsLFNDrive
OpenRegStream
Options_RunDLLW

user32

CreateDialogParamA
CheckDlgButton
AnyPopup

wsock32

WSAAsyncGetProtoByNumber
__WSAFDIsSet
s_perror
ioctlsocket
TransmitFile
AcceptEx
shutdown
recvfrom
GetTypeByNameA

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE