ipconfig[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ipconfig.exe
Size

28KB
MD5

d99377a3cc218a71e27dfa4c6c4892a4
SHA1

7cfec219d13ab5f4cf526fc159bbcb1656e11dd4
SHA256

5f2ff9dfa80dcbae0301500b50f5bb10dda257be9c061b3cfcc9ba3c1fbc8891
SHA512

5d98555e5e9dab7895e1ae53fb0301672cfae96efeab8de50a4f5496fbbc69dab20c233ce9568ca8ca316aba62c9fe8b4c1d1b4d609d234a595d11e1834c3b46
SSDEEP

768://oPP271WqFL6RPh6sl1GRliZz0ZdQGde:H4P2ZPFePhRl1GGAZdQGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ipconfig.exe

Files

ipconfig.exe
.exe windows:10 windows x86

9cb4975e5fc345ba48c788102c18c1a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcschr
_get_osfhandle
fflush
_setmode
_write
_fileno
fgetpos
fwprintf
_except_handler4_common
_controlfp
?terminate@@YAXXZ
__iob_func
_wcsicmp
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
exit
setlocale
toupper
memcpy
_vsnwprintf
memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryExW

iphlpapi

GetCurrentThreadCompartmentId
ConvertGuidToStringW
ConvertInterfaceLuidToGuid
GetAdaptersAddresses
ConvertInterfaceIndexToLuid
GetNetworkParams
ConvertInterfaceLuidToNameW
ConvertLengthToIpv4Mask
SetCurrentThreadCompartmentId

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount
GetComputerNameExW

api-ms-win-core-localization-l1-2-1

FormatMessageW
SetThreadUILanguage

ws2_32

InetNtopW

api-ms-win-core-file-l1-2-1

FileTimeToLocalFileTime
GetFileType

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-datetime-l1-1-1

GetDateFormatW
GetTimeFormatW

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter

dnsapi

DnsFlushResolverCache
DnsResolverOp
DnsQuery_W
DnsQueryConfigAllocEx
DnsFree
DnsFreeConfigStructure
DnsGetCacheDataTable

api-ms-win-core-heap-l1-2-0

HeapSetInformation
HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-console-l1-1-0

GetConsoleMode

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentProcessId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
RtlFreeUnicodeString
RtlIpv6AddressToStringW
RtlStringFromGUID

nsi

NsiAllocateAndGetTable
NsiFreeTable
NsiGetAllParameters
NsiSetAllParameters

dhcpcsvc

DhcpHandlePnPEvent
DhcpReleaseParameters
DhcpEnumClasses
DhcpAcquireParameters

dhcpcsvc6

Dhcpv6ReleaseParameters
Dhcpv6SetUserClass
Dhcpv6IsEnabled
Dhcpv6AcquireParameters
Dhcpv6GetUserClasses

api-ms-win-security-base-l1-2-0

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cb4975e5fc345ba48c788102c18c1a6

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

api-ms-win-core-libraryloader-l1-2-0

iphlpapi

api-ms-win-core-heap-l2-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-localization-l1-2-1

ws2_32

api-ms-win-core-file-l1-2-1

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-errorhandling-l1-1-1

dnsapi

api-ms-win-core-heap-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-profile-l1-1-0

ntdll

nsi

dhcpcsvc

dhcpcsvc6

api-ms-win-security-base-l1-2-0

api-ms-win-core-processenvironment-l1-2-0

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 916B

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 916B

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB