dad00db1ecf617c36e8dc5c06e47a37ae035825998f05ca25c7fdfdca323d996N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad00db1ecf617c36e8dc5c06e47a37ae035825998f05ca25c7fdfdca323d996N
Size

35KB
MD5

b85b0e63e6538eea711deff3838b50a0
SHA1

b2ba15c2743ce188c6159db90292819b0926ada6
SHA256

dad00db1ecf617c36e8dc5c06e47a37ae035825998f05ca25c7fdfdca323d996
SHA512

e0d34e3c6fdee960577910258b4f3183eb0c75e625cc7c217f30d83a0df41973212678b883425872ab04766912476ed4b8d77a2db68bceba5aa8d357209f30bb
SSDEEP

768:U38fKMlCkZtaRJXElvjJCR5/heeWtlwYX5bfAfUZwQD/:ZJC4taRWNIf/heRz5jrLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad00db1ecf617c36e8dc5c06e47a37ae035825998f05ca25c7fdfdca323d996N

Files

dad00db1ecf617c36e8dc5c06e47a37ae035825998f05ca25c7fdfdca323d996N
.exe windows:6 windows x86 arch:x86

0327a3b06807a2b22d59b9d0f00f42d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hostname.pdb

Imports

kernel32

GetLastError
SetThreadUILanguage
HeapSetInformation
Sleep
FormatMessageA
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
exit
_write
_setmode
puts

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE