8e0479258487cea886f318a678534072 | Triage

Sharing

General

Target

8e0479258487cea886f318a678534072
Size

269KB
MD5

8e0479258487cea886f318a678534072
SHA1

495a2845391d56e054487d215209688eea22be10
SHA256

7952c7f33a58ba93129820d0bc6676492c1278c66b8e8d9f866d690369b225b7
SHA512

4939e940ccf1702bc0f6de47e1681b45ba6d45ff2c6e729d557ab27ace113d136cf3f68bccb4637407eb4007d3190b5e452d52f832c7fde53ebe623eb46c7f3e
SSDEEP

6144:s9YtFsRXx5I/ECTj3jv+1nRIOG9CAxPpN9Dt9rpCwc:sKtShc6dREUAxPpN5Uw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e0479258487cea886f318a678534072

Files

8e0479258487cea886f318a678534072
.exe windows:4 windows x64 arch:x64

e9a9e2d51e535222d78731398308afba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
GetTickCount
OutputDebugStringW
SetLastError
Sleep

user32

GetCursorPos
GetLastInputInfo

ws2_32

__WSAFDIsSet
closesocket
connect
htons
inet_pton
ioctlsocket
select
socket

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 800B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE