IPDetect[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

IPDetect.exe
Size

128KB
MD5

c4cef8e325d90fbf95d1a947f8826ce0
SHA1

2ddfbfaed1d8b1a793d18a6f08608410f8eca736
SHA256

08521412d36fa28eff2ad96b0713b2aed15fbbab0c391deb2b2020a5a2323253
SHA512

b9621239dc3fa1193dd2de75a36710707a44cb1cfd1c7b9a57000aaf022e32942683048705a32f87337614d5b538f023eb5439fd0eafca57c02c81a0d539b062
SSDEEP

3072:R5fS5sXuxtT5OpdexwPRV0az3myb8zBNozRMJAmlw:R5texl5ORCaz3myb8zXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IPDetect.exe

Files

IPDetect.exe
.exe windows:4 windows x86

765a487dc2784fe8580c434e22a2a77e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSASetLastError
recv
WSAGetLastError
recvfrom
send
sendto
ioctlsocket
bind
htons
inet_addr
gethostbyname
connect
closesocket
WSAStartup
socket
setsockopt
WSACleanup

kernel32

FlushFileBuffers
GetFileAttributesA
GetFullPathNameA
RtlUnwind
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
SetFilePointer
WriteFile
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
SetLastError
GetCurrentDirectoryA
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrlenA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetPrivateProfileIntA
WritePrivateProfileStringA
GetDriveTypeA
GetEnvironmentVariableA

user32

CreateWindowExA
GetWindowTextA
TrackPopupMenu
GetMenuItemID
GetMenuItemCount
GetMenu
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ReleaseDC
GetDC
DestroyMenu
GetClassNameA
PtInRect
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
LoadStringA
DefWindowProcA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
GetWindowLongA
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
EnableWindow
KillTimer
ScreenToClient
LoadMenuA
GetSubMenu
SetMenuDefaultItem
SetTimer
GetClientRect
wsprintfA
SendMessageA
LoadAcceleratorsA
TranslateAcceleratorA
DefDlgProcA
LoadIconA
LoadCursorA
RegisterClassA
UnregisterClassA
GetKeyState
GetActiveWindow
IsWindowEnabled
EnableMenuItem

gdi32

SetBkColor
CreateBitmap
SetTextColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

ord17

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

765a487dc2784fe8580c434e22a2a77e

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 16KB - Virtual size: 27KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 27KB

.rsrc
Size: 8KB - Virtual size: 4KB