ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN | Triage

Sharing

General

Target

ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN
Size

1.9MB
MD5

c1e0e97861866fcfbd0161f6bd3983e0
SHA1

bc2213de0a066ce83e860f6611140e33858ae487
SHA256

ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453f
SHA512

5305ed72ed5c4919947cd05619eba62611e6cbe045eb62cb89676d4b588476b56cc184d41bab80bec5526a1d2864608616424a6ff24fe979d7ee4887ef82dee8
SSDEEP

24576:luHcSjySebnZgqJAj9uhRKFiIhDbHpjyAwI+w3mqvYHpFxHv8s54YvYrjXrGO:lkP+BZnrhEkIDjP5B2qvypX0sZveXrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN

Files

ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE