c512b954c2951758ce9e622afd4776a4a44870c6318af16e1d6c6aa4d25af135 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c512b954c2951758ce9e622afd4776a4a44870c6318af16e1d6c6aa4d25af135
Size

804KB
MD5

43acc2ef128bba1f10c2bfdc2675c43e
SHA1

170b3855d9b056ec21a6c400e62e3742b0fb350d
SHA256

c512b954c2951758ce9e622afd4776a4a44870c6318af16e1d6c6aa4d25af135
SHA512

0205fd139fa4d7e15f9aa99f495dd05fde3b0ef86618b8b5eb9da9f6de503fb94a34b2e28b8e46a8d1be23ff3ac54f6a8e3824271f005cbc40c3e8c89403e36c
SSDEEP

12288:llEM1dVxEmWwxQceLySWDNtRAOUGelbX5U6+9QXtkS2YLATmNGsmjTwuyf:lJfVxEPMeLngiOU1+6+9w61z6vmXMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c512b954c2951758ce9e622afd4776a4a44870c6318af16e1d6c6aa4d25af135

Files

c512b954c2951758ce9e622afd4776a4a44870c6318af16e1d6c6aa4d25af135
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE