b7dadd7ef807f5e5884e3ad81fabfbeea54a9653e3ecd928fb18ec8505cc5706

Sharing

Copy URL Twitter E-mail

General

Target

b7dadd7ef807f5e5884e3ad81fabfbeea54a9653e3ecd928fb18ec8505cc5706
Size

11KB
MD5

9fd668f05713354f0ad3e602f0de54e8
SHA1

84fab4637a0358b7bc57a0af0222bd9270b3b695
SHA256

b7dadd7ef807f5e5884e3ad81fabfbeea54a9653e3ecd928fb18ec8505cc5706
SHA512

1d1a23606ca52dd089f72a688fdbba2d2abf2a7c4c8d2a4cfb8097a1982b2727e1ad43b26174e68519fc61e4c2476486abb043cd377f9d7b016f632a17bd3179
SSDEEP

192:aGIFq8cDzsMo5fRPhtWJ110kjOL17EmrNdbq17YC7E5pz6kMoYi28M9:aGI/cDzsTfRZ4JFje7Ewna7t7ak8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7dadd7ef807f5e5884e3ad81fabfbeea54a9653e3ecd928fb18ec8505cc5706

Files

b7dadd7ef807f5e5884e3ad81fabfbeea54a9653e3ecd928fb18ec8505cc5706
.exe windows:6 windows x86 arch:x86

e7bb50b2757db8048633df0ae26b5217

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
Sleep
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter

ws2_32

htons
WSAStartup
recv
connect
socket
send
closesocket
gethostbyname
WSACleanup

vcruntime140

memset
_except_handler4_common
strstr
__current_exception_context
__current_exception
memcpy

api-ms-win-crt-stdio-l1-1-0

fclose
fseek
__stdio_common_vfprintf
__p__commode
fwrite
ftell
_set_fmode
fopen
fread
__stdio_common_vsprintf
__acrt_iob_func

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_exe
_exit
perror
__p___argc
__p___argv
_cexit
_c_exit
_set_app_type
_initialize_narrow_environment
_get_initial_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_register_thread_local_exe_atexit_callback
exit

api-ms-win-crt-time-l1-1-0

_localtime64
_time64

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7bb50b2757db8048633df0ae26b5217

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 480B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 480B