9cc6b5e2c05c6033517fcdeb86d1b10b631ffae046cc927553fc9028d3cf7428N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cc6b5e2c05c6033517fcdeb86d1b10b631ffae046cc927553fc9028d3cf7428N
Size

86KB
MD5

e65f8694fd60f7f446a5b3bcee1b2da0
SHA1

d60313932939d6d754d6cb0bd603b037ac47d0b4
SHA256

9cc6b5e2c05c6033517fcdeb86d1b10b631ffae046cc927553fc9028d3cf7428
SHA512

db559a98a27f3b3c1a85d4b3d1eb237ddec6b10035ec9ec7bc74af59e10f8f63f2b08ee8fde5893e08cf4609fd95eee5328e29050e57b4772d639dc15d5985b9
SSDEEP

1536:XDULol+QpodkvbCm0E/SD9MX4V//A4Jlmmrb+UQLMCl4EoAGjGHk:XYLol+QikjCW6D9M6N0+CUQdmRV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cc6b5e2c05c6033517fcdeb86d1b10b631ffae046cc927553fc9028d3cf7428N

Files

9cc6b5e2c05c6033517fcdeb86d1b10b631ffae046cc927553fc9028d3cf7428N
.exe windows:1 windows x86 arch:x86

fd07733f5b6a0474785f74a236806bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree
Sleep
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
LoadLibraryA
GetLastError

ws2_32

WSAStartup
socket
gethostbyname
setsockopt

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE