ad0cc67206d59cbe807fb088fa8da9a6cf597a7d1a672d9e168fa4d2560bd7c5N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad0cc67206d59cbe807fb088fa8da9a6cf597a7d1a672d9e168fa4d2560bd7c5N
Size

35KB
MD5

967f017065fbcc2a3cb069aa311092b0
SHA1

64598f20cd03c56913028388ce9049307c5325b9
SHA256

ad0cc67206d59cbe807fb088fa8da9a6cf597a7d1a672d9e168fa4d2560bd7c5
SHA512

628ff9680762dfade4f5d34935b3803f18691bf017c82cb1c3879b278460d07947d4aea4ad2a5eee15326edf67fea3ee53fe4d26a40482c4766c59ecee2ea762
SSDEEP

768:N38fKMl8YEUZCNAZ8PJiUQhW7xIicsTdx0Er:GJ8YONJgo7x9cQdyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad0cc67206d59cbe807fb088fa8da9a6cf597a7d1a672d9e168fa4d2560bd7c5N

Files

ad0cc67206d59cbe807fb088fa8da9a6cf597a7d1a672d9e168fa4d2560bd7c5N
.exe windows:6 windows x86 arch:x86

0327a3b06807a2b22d59b9d0f00f42d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hostname.pdb

Imports

kernel32

GetLastError
SetThreadUILanguage
HeapSetInformation
Sleep
FormatMessageA
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
exit
_write
_setmode
puts

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE