d8f0e6c273393ff42c0a97aaf4f9d87e86dd448eb775e7d3598009a927cf9f4f

Sharing

Copy URL

Twitter E-mail

General

Target

d8f0e6c273393ff42c0a97aaf4f9d87e86dd448eb775e7d3598009a927cf9f4f
Size

135KB
MD5

4bea6c964eac3c9b694c390cd9600a6c
SHA1

9b533b0decceb16ba6feefa4742986148370e335
SHA256

d8f0e6c273393ff42c0a97aaf4f9d87e86dd448eb775e7d3598009a927cf9f4f
SHA512

d504a4a8f47d99ec68ba7de3e6a81d03741d490be5d38fa6078aace6bbd483c6bfb58c46bb642562556e826090e37673704411b5c5331bb090b50f898110108a
SSDEEP

1536:B5x+2lbj96aYM/ybEGrO2Ri3T37iqoYzbHdaLh0arfieuYClS:B5R9lYdb/rTRi33s0arfxuYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8f0e6c273393ff42c0a97aaf4f9d87e86dd448eb775e7d3598009a927cf9f4f

Files

d8f0e6c273393ff42c0a97aaf4f9d87e86dd448eb775e7d3598009a927cf9f4f
.exe windows:6 windows x86

f38e99aa1426f5601f26bb2ce69f3653

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
WSACleanup
WSAIoctl
closesocket
gethostbyname
select
WSAStartup
send
socket
connect
recv
htons

kernel32

GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
OutputDebugStringW
IsDebuggerPresent
GetConsoleWindow
VirtualFree
VirtualAlloc
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
Sleep
SetEvent
CloseHandle
CreateEventA
GetCurrentThreadId
CancelIo
lstrlenW
CreateEventW
ResetEvent
WideCharToMultiByte
WriteProcessMemory
ResumeThread
OpenProcess
GetFileAttributesA
GetSystemDirectoryA
GetThreadContext
VirtualAllocEx
CreateProcessA
SetThreadContext
GetExitCodeProcess
GetModuleFileNameA
GetCurrentDirectoryA
MoveFileExA
CreateThread

user32

GetInputState
PostThreadMessageA
ShowWindow

advapi32

RegSetValueExW
RegDeleteValueW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

winmm

timeGetTime

vcruntime140

_CxxThrowException
__current_exception_context
__current_exception
memset
memmove
__std_exception_copy
_except_handler4_common
__std_exception_destroy
__CxxFrameHandler3
memcpy

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_crt_atexit
_initterm_e
exit
_exit
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
terminate
_controlfp_s
_invalid_parameter_noinfo_noreturn
_cexit
_initterm
_beginthreadex
_errno

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
_set_fmode
__stdio_common_vsprintf
__stdio_common_vfprintf
__p__commode
__stdio_common_vsprintf_s

api-ms-win-crt-string-l1-1-0

_wcsrev
wcscpy_s

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-math-l1-1-0

__setusermatherr
ceil

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f38e99aa1426f5601f26bb2ce69f3653

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

winmm

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 11KB

.vmp0 Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 11KB

.vmp0
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 48KB - Virtual size: 48KB