105223080e5ecd68ab84692f66854d0f0d06ea9aee4986c1b5c4d747e5978656N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

105223080e5ecd68ab84692f66854d0f0d06ea9aee4986c1b5c4d747e5978656N
Size

411KB
MD5

25a211c00b5ccd96be627f6806410b40
SHA1

3dcff6b40b320d53fcb7ecf312304296d0eab16e
SHA256

105223080e5ecd68ab84692f66854d0f0d06ea9aee4986c1b5c4d747e5978656
SHA512

f2b7a64aac9583f795f97fedfb5ece0a92f127b503d5e6df648db1b9b3175376b51ffda9ef8c218b583bcf37cc1f98ee36c552834d161207744ab04e1f7ce57a
SSDEEP

12288:kjuq+NFcLItnRNjcSNTp/di9GFpWQsap4:kSq+I2RNhp/d8G7WQsO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105223080e5ecd68ab84692f66854d0f0d06ea9aee4986c1b5c4d747e5978656N

Files

105223080e5ecd68ab84692f66854d0f0d06ea9aee4986c1b5c4d747e5978656N
.exe windows:4 windows x86 arch:x86

2d07b8a4d02d06c6d33e155dde6c1279

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
inet_addr
gethostbyaddr
WSAGetLastError
recv
socket
connect
closesocket
send

kernel32

LoadLibraryA
TerminateThread
GetSystemTime
ExitProcess
lstrlenA
MultiByteToWideChar
Sleep
GetProcAddress

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ