084_Snape_AJ[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

084_Snape_AJ.exe
Size

126KB
MD5

a04648b9d7ddfe295f6c74bfff487611
SHA1

045a92f7da11af943ddfa26c588f5ff4153acc08
SHA256

fdba54e0594e62b6310bc355d15922b208d20b368383a07fc1e369472e319c4a
SHA512

47b7f1caad5e90fb257c0791f3249a29822c828668c55d2de301189b24f40269e753cadb028422b6d571a4dd10d7c3bd1c1de5b05159f6e42a22d548d29ee118
SSDEEP

1536:NIGc96bf2FMwR31yCbhzXWqycBlzUf7qHL3G17PFagsfy:6GFKyC0tiE7fsfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
084_Snape_AJ.exe

Files

084_Snape_AJ.exe
.exe windows x86

23e31ac6d4bb98181323557b4fb20c96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenProcess
SetErrorMode
SetUnhandledExceptionFilter
Sleep
SleepEx
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_initterm
_iob
_onexit
abort
acos
asin
atan
calloc
exit
fprintf
free
fwrite
malloc
memcpy
rand
signal
strlen
strncmp
vfprintf

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
socket

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/94
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/110
Size: 1024B - Virtual size: 543B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23e31ac6d4bb98181323557b4fb20c96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 76B

.rdata Size: 2KB - Virtual size: 1KB

/4 Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 192B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 800B

/14 Size: 1024B - Virtual size: 880B

/29 Size: 40KB - Virtual size: 40KB

/41 Size: 8KB - Virtual size: 8KB

/55 Size: 9KB - Virtual size: 9KB

/67 Size: 1024B - Virtual size: 872B

/78 Size: 4KB - Virtual size: 3KB

/94 Size: 5KB - Virtual size: 5KB

/110 Size: 1024B - Virtual size: 543B

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 76B

.rdata
Size: 2KB - Virtual size: 1KB

/4
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 192B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 800B

/14
Size: 1024B - Virtual size: 880B

/29
Size: 40KB - Virtual size: 40KB

/41
Size: 8KB - Virtual size: 8KB

/55
Size: 9KB - Virtual size: 9KB

/67
Size: 1024B - Virtual size: 872B

/78
Size: 4KB - Virtual size: 3KB

/94
Size: 5KB - Virtual size: 5KB

/110
Size: 1024B - Virtual size: 543B