3a408baa278b47af64af5de8f9874130N[.]exe | Triage

Sharing

General

Target

3a408baa278b47af64af5de8f9874130N.exe
Size

708KB
MD5

3a408baa278b47af64af5de8f9874130
SHA1

1e4d603d4c1fef0b15a64ef3c2c72a29fc51cc28
SHA256

1fba91ef66603da59a73c9d2d0f4308d233445db3a2dc103f782012380b3bf8a
SHA512

8080b2525840b9b140238634a6a586581eaef235372f05167f53b358035a7e409c615abf368c4051da86cd363c62274ff8df8350a85d9a2b199a6550f8669dbb
SSDEEP

12288:llrgPMse0aPhalQxJhLshRYk9A+IoAtCd1oow59q54lcG2:lqP9e0Sa7K+IVPowe0m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a408baa278b47af64af5de8f9874130N.exe

Files

3a408baa278b47af64af5de8f9874130N.exe
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE