bab17a98d67bbab4f11842036f58df7da6a72291d9c1305cc54ec1d06e09d080

Sharing

Copy URL Twitter E-mail

General

Target

bab17a98d67bbab4f11842036f58df7da6a72291d9c1305cc54ec1d06e09d080
Size

236KB
MD5

5977cf1cce33e2e777b46b9d3d1ebe85
SHA1

4a64f6b2e546bf3a8383194e9ffe251e5dcf0ca9
SHA256

bab17a98d67bbab4f11842036f58df7da6a72291d9c1305cc54ec1d06e09d080
SHA512

5efde4cee365adf0c53e62b4fdfe4a5afc2922e848ed0941fd7340947ec44faa5633dcd1a7a34c1b9e7bb487c10af5538f9bf16c8c60480145e23c00f9669881
SSDEEP

3072:XLlwWS968OWFxPFblqJeu4LYMnZUwNW+1TLGg8PcxJGpCjwFbR3HZEBCNOOiZY9Q:XyW/MpuB/KKOsMjwFbpHZ/T1QUDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab17a98d67bbab4f11842036f58df7da6a72291d9c1305cc54ec1d06e09d080

Files

bab17a98d67bbab4f11842036f58df7da6a72291d9c1305cc54ec1d06e09d080
.dll windows:0 windows x86

7c97ad12bed9db83dec5dd0620ee19a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord690

msvcrt

sprintf

kernel32

WinExec
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetDesktopWindow

advapi32

LookupPrivilegeValueA

ws2_32

select

shlwapi

PathFileExistsA

ole32

CoUninitialize

oleaut32

SysAllocString

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

SetModule

Sections

.text
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hh0
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hh1
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c97ad12bed9db83dec5dd0620ee19a3

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

shlwapi

ole32

oleaut32

msvcp60

netapi32

Exports

Exports

Sections

.text Size: - Virtual size: 55KB

.rdata Size: - Virtual size: 14KB

.data Size: - Virtual size: 28KB

.hh0 Size: - Virtual size: 170KB

.hh1 Size: 224KB - Virtual size: 221KB

.reloc Size: 4KB - Virtual size: 264B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: - Virtual size: 55KB

.rdata
Size: - Virtual size: 14KB

.data
Size: - Virtual size: 28KB

.hh0
Size: - Virtual size: 170KB

.hh1
Size: 224KB - Virtual size: 221KB

.reloc
Size: 4KB - Virtual size: 264B

.rsrc
Size: 4KB - Virtual size: 3KB