1f756cbf4de02ede22402e3b5c39f0867bce526feda772888081d787a3b4b0d0

Resubmissions

20/07/2023, 06:46

230720-hjtdhsdg61 3

26/11/2022, 14:45

221126-r4w5ksee6z 10

Sharing

Copy URL Twitter E-mail

General

Target

1f756cbf4de02ede22402e3b5c39f0867bce526feda772888081d787a3b4b0d0
Size

315KB
MD5

4edcdd1ce4aab0df833871f5de605727
SHA1

a69124145eabe0b4217b6aa1092bdf779bbf6772
SHA256

1f756cbf4de02ede22402e3b5c39f0867bce526feda772888081d787a3b4b0d0
SHA512

1b5d0eacab6cab2cfc5c02a258469d46642045cf1d5a7bf170c19ec9968d946710ddc25445949bb31d3184c37832c541966a297bc79c3242954f754d2bf057a5
SSDEEP

3072:b8O0osK7brfrLSKA4SBXzEsb4JlFsWyR1SOfhxLwIKixKXXXXXXXXeO2RT:h0osmrfrLSKA46VbYDyvbKixBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f756cbf4de02ede22402e3b5c39f0867bce526feda772888081d787a3b4b0d0

Files

1f756cbf4de02ede22402e3b5c39f0867bce526feda772888081d787a3b4b0d0
.exe windows x64

966da364b6ef96c5d6279fcb9d4c9765

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

InternetCloseHandle

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

htons
socket
WSACleanup
inet_pton
gethostbyname
gethostname
WSAStartup
connect
send
recv
closesocket
inet_ntoa

kernel32

TlsAlloc
ReadFile
SetEndOfFile
HeapReAlloc
HeapSize
FlushFileBuffers
WriteConsoleW
SetFilePointerEx
CreateFileW
GetProcessHeap
GetStringTypeW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetProcAddress
LoadLibraryA
CreateMutexA
GetLastError
CloseHandle
ExitProcess
GetModuleFileNameA
Sleep
GetComputerNameA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ReadConsoleW
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetConsoleCP
GetConsoleMode
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

966da364b6ef96c5d6279fcb9d4c9765

Headers

DLL Characteristics

File Characteristics

Imports

wininet

version

ws2_32

kernel32

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 6KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 228B

.rsrc Size: 166KB - Virtual size: 168KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 6KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 228B

.rsrc
Size: 166KB - Virtual size: 168KB

.reloc
Size: 2KB - Virtual size: 1KB