92e6692c42cbb0ac8f124babae1748374041a9af8f83eec34039625b0aeaa3fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92e6692c42cbb0ac8f124babae1748374041a9af8f83eec34039625b0aeaa3fc
Size

6KB
MD5

e2882bf936d1346d78c8303e9a2e1819
SHA1

381e530db99ea0b6a0292be8bcc03c163b71212a
SHA256

92e6692c42cbb0ac8f124babae1748374041a9af8f83eec34039625b0aeaa3fc
SHA512

28b70a4e3003e61cb20926ccded0a5b24eb42c73da954ef6fe6d1c7d344b1893efe5cf40016df351b06358612df2c4fb00e800540cabfd0ee04a960d73682e9f
SSDEEP

96:Zs++J2plwXCUOKRGMvs0D/l5LcaFYb1rhiGc2:3eqMd700D9VmiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92e6692c42cbb0ac8f124babae1748374041a9af8f83eec34039625b0aeaa3fc

Files

92e6692c42cbb0ac8f124babae1748374041a9af8f83eec34039625b0aeaa3fc
.exe windows:4 windows x86 arch:x86

44d556c36e1d9c63f294329d2a401ef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SetDlgItemTextA
MessageBoxA
GetDlgItemTextA
EndDialog
wsprintfA
DialogBoxParamA

kernel32

lstrcatA
lstrlenA
RtlZeroMemory
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
ExitProcess

wsock32

WSAAsyncSelect
WSAGetLastError
WSAStartup
connect
htons
inet_addr
ioctlsocket
recv
send
socket

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE