38b381ed1df4c27688f2d4572d622870_exe32[.]exe

General

Target

38b381ed1df4c27688f2d4572d622870_exe32.exe
Size

88KB
MD5

38b381ed1df4c27688f2d4572d622870
SHA1

2488d8607c49479ff39cc33eadde6b49d5f797ef
SHA256

78e39b26013a6673b1204cba455a1539bb982c125ecda4cbf9c668fed90a2e92
SHA512

5daea71618614a72199fdd8aaac334a1f8e29dc37a0df2781f7034a3691fe314815c10e07af5ad5a37096d973d416fda9698857246b24fb054b7640eb4e06455
SSDEEP

768:tSctWoebqyCZcy49m02auKnmpEBN0Rf6eZ0EAd61Ie7fF4L8Kchfql33mNE9JO:tDebqyCZk72auK5BN0O62wdQl3WUJO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b381ed1df4c27688f2d4572d622870_exe32.exe

Files

38b381ed1df4c27688f2d4572d622870_exe32.exe
.exe windows:4 windows x86

43ea40d835d502dec003b313c3875873

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

MessageBoxA

ws2_32

inet_addr
htons
htonl
socket
WSACleanup
send
recv
closesocket
WSAStartup
connect

kernel32

SetEndOfFile
ReadFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
RtlUnwind
Sleep
FindClose
FindNextFileA
FindFirstFileA
CloseHandle
CreateProcessA
GetLastError
HeapAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetFullPathNameA
GetSystemTimeAsFileTime
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetDriveTypeA
GetCurrentDirectoryA
GetTimeZoneInformation
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSize
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
SetFilePointer
LoadLibraryA

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43ea40d835d502dec003b313c3875873

Headers

File Characteristics

Imports

advapi32

user32

ws2_32

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 21KB