d76e584d1b121f4e13ab63d28aa3163a7f062c0d6cffe6c0ff01c83c721ae945N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d76e584d1b121f4e13ab63d28aa3163a7f062c0d6cffe6c0ff01c83c721ae945N
Size

342KB
MD5

2eef74099d5c3b67cfe73cad710fe360
SHA1

89c5ceb0b4b68753789858a78abee83bd7b5f209
SHA256

d76e584d1b121f4e13ab63d28aa3163a7f062c0d6cffe6c0ff01c83c721ae945
SHA512

88b449fb569d9ca88303e4eb9a3b9e545e2a5ff9447cb97a20b032bff47a974b6d935ae1f3b1cab8950600b492d090e2aa7031b44e12b35163a3124836683ab0
SSDEEP

6144:lBPQnpnwlwBt9h6dwYFWDiUcIJlL/f6RH31hUljqbF0RL/9V1:lQpnMQUH4sIPjf6131cVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d76e584d1b121f4e13ab63d28aa3163a7f062c0d6cffe6c0ff01c83c721ae945N

Files

d76e584d1b121f4e13ab63d28aa3163a7f062c0d6cffe6c0ff01c83c721ae945N
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE