ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2 | Triage

Sharing

General

Target

ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
Size

106KB
MD5

a7f06049baa342a5881df6f9e352abcd
SHA1

0e645d988a446c32b74f4688da782c949309cdaf
SHA256

ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
SHA512

3252e1b6ebc67eee2a153627f3e2f6629eaddae5dc8814ccd9d46e9cab7cca657e420a5f5eb731958e2c8471a7dcabf757731bfe6144669c35373a43ea4ba469
SSDEEP

1536:lBYL8mIvuYwmPt1opqIrYfLqT2VS41QgfpxX9T35Jqgf7an7YVUXicR:lBk8mIvuEPGb02TaQgX9T35JqOaUUScR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2

Files

ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE