1844b55fe3bab6d34d2c79aecbd626365be57cb5f9518a4e4002dd183ab12c0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1844b55fe3bab6d34d2c79aecbd626365be57cb5f9518a4e4002dd183ab12c0d
Size

456KB
MD5

0d297975a4861384e08270dfe3ff8b6d
SHA1

e464171a1db5e4f5a6cd90f3bbf60d2b1ee0edbf
SHA256

1844b55fe3bab6d34d2c79aecbd626365be57cb5f9518a4e4002dd183ab12c0d
SHA512

c53f070598bdf3ff0e1ebec3fbfacfe18cf749121e18cc7fc705ef3037d6241ea349c44cfad4626e8b28a11d5234f6ca7a0bea85d0887f6f3966d3d21f617a28
SSDEEP

6144:lBPQ77inrllwpoYY3vPNOZyQKB6Qcqm6Ml9A7nvoYjYt387jx:loinraFuwQcqmvlS7voYjYtGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1844b55fe3bab6d34d2c79aecbd626365be57cb5f9518a4e4002dd183ab12c0d

Files

1844b55fe3bab6d34d2c79aecbd626365be57cb5f9518a4e4002dd183ab12c0d
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE