389912ec6b0ab3b76a9301d4db9ed9ff4bd8654dd6f633af7c2f0123a462d59d

General

Target

389912ec6b0ab3b76a9301d4db9ed9ff4bd8654dd6f633af7c2f0123a462d59d
Size

39KB
MD5

cd5a860cba80e2dc2d607f99538f861e
SHA1

28d4f5f8694ed15d4f933c7038b1969ce0fcf2db
SHA256

389912ec6b0ab3b76a9301d4db9ed9ff4bd8654dd6f633af7c2f0123a462d59d
SHA512

18a37ad68b7bdc1f5252a68e94685a1d55a0228e6501c6055db6eab1b1bf0762a3fa435ec48eaf23a0d31712d3cbf069563059b88a081cd161cf1fabbfbdb734
SSDEEP

768:j+NWghP1J+2LNbB3kJMqWNU+KD4FV2+1TooFnQa:iNXrpNkMqqU+hV2+1MoFnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389912ec6b0ab3b76a9301d4db9ed9ff4bd8654dd6f633af7c2f0123a462d59d

Files

389912ec6b0ab3b76a9301d4db9ed9ff4bd8654dd6f633af7c2f0123a462d59d
.exe windows x86

d1c8588a433fbe393abee192413d6a18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
exit
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
memset
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
free
malloc
tolower
atoi
printf
strncmp
strstr
_crt_debugger_hook
strchr
memcpy

ws2_32

WSACleanup
closesocket
recv
send
connect
setsockopt
htons
socket
gethostbyname
WSAStartup

kernel32

TerminateProcess
Sleep
InterlockedExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedCompareExchange

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1c8588a433fbe393abee192413d6a18

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

ws2_32

kernel32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1KB - Virtual size: 1KB