9bd66cdc3ed6f7d2032a86bc113ce7a9172b0ec7a02fa9e222419fd8c69eaf51N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bd66cdc3ed6f7d2032a86bc113ce7a9172b0ec7a02fa9e222419fd8c69eaf51N
Size

578KB
MD5

fd2edd35c4fccfd7f7d436f1d0b8faf0
SHA1

c23b35ba11ff037e76378d41435f77b495ccdbdd
SHA256

9bd66cdc3ed6f7d2032a86bc113ce7a9172b0ec7a02fa9e222419fd8c69eaf51
SHA512

bb073f24affda2f5bf830853da1abae7d7cb5d19c9664495cbd80cb3b8fffcda7986ff10064288a37a4cc1d8c5808f58a9afc84d993d712d9ec1154df544e114
SSDEEP

12288:lw0FGm/oAt3V3zKTn/YqWt8WaZpEbP8QTwqXW:lwQfVDDojqaZpEbkQUWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bd66cdc3ed6f7d2032a86bc113ce7a9172b0ec7a02fa9e222419fd8c69eaf51N

Files

9bd66cdc3ed6f7d2032a86bc113ce7a9172b0ec7a02fa9e222419fd8c69eaf51N
.exe windows:4 windows x86 arch:x86

c825d892ec1994311831ac7bb64ddf1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket

kernel32

Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE