42b07129024ea094948a7c3c7dcadd9e6ca927042eda132329cc5278ce4846a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b07129024ea094948a7c3c7dcadd9e6ca927042eda132329cc5278ce4846a8
Size

3KB
MD5

51c5adf1098825c87b885cd6307ac151
SHA1

520341213c68d576631bc91f3a22fb2edd3b8f03
SHA256

42b07129024ea094948a7c3c7dcadd9e6ca927042eda132329cc5278ce4846a8
SHA512

a32d485a44ed7e6cae2839feaaea95bb80d3c221f4f58c3c07580cefff63d400fd2e3dd6f5cfad8acfafb9fef6a8837c98d8e139d5731fb622983c4985b33c8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b07129024ea094948a7c3c7dcadd9e6ca927042eda132329cc5278ce4846a8

Files

42b07129024ea094948a7c3c7dcadd9e6ca927042eda132329cc5278ce4846a8
.exe windows:4 windows x64 arch:x64

dad706f8eb490a307f707313d2ed1509

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess

ws2_32

WSASocketA
WSAStartup
connect
htons
inet_pton

Sections

.text
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE