00c9f9032dacfa067d08ad0b28f0007c

Sharing

Copy URL Twitter E-mail

General

Target

00c9f9032dacfa067d08ad0b28f0007c
Size

88KB
MD5

00c9f9032dacfa067d08ad0b28f0007c
SHA1

43a6c695a44bbe9144fc1cf757d0d87fd0555ead
SHA256

71f399f62dc846cd0d6e052473a5ff44a3f1f2d15511cc7c6f8fdd60253275a7
SHA512

3cc31efcf3d4550b4d2fa8537e571531b5f99cb77028cdaea5fa2d67ec4d8ee1dea586b85e222f88855540edb4c4aa7f93aeeafbf054249d70f1c18dfe7ed00a
SSDEEP

1536:hMfpX+yMerrKvpuMLKsb6iOv0/Qo1I0l:2R/+vYMl//Qo1I0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c9f9032dacfa067d08ad0b28f0007c

Files

00c9f9032dacfa067d08ad0b28f0007c
.exe windows:4 windows x86 arch:x86

d48c7ba6509676dbbab7dd8e4e5446d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
gethostbyname
recv
WSACleanup
closesocket
WSAGetLastError
WSAStartup
socket
htons
connect
send
WSAAsyncSelect

kernel32

CopyFileA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
SetFileTime
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
GetFileTime
SetFileAttributesA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
lstrcpyA
lstrcatA
FreeLibrary
LoadLibraryA
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
lstrcmpiA
GetTickCount
LocalFree
GetCurrentProcess
GetVersionExA
CreateThread
GetLastError
CreateMutexA
ExitProcess
DeleteFileA
WriteFile
Sleep
ExpandEnvironmentStringsA
GetTempPathA
GlobalMemoryStatus
GetComputerNameA
HeapAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
ReadFile
GetModuleFileNameA
SetEndOfFile
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
HeapFree
HeapReAlloc
HeapSize
SetFilePointer

user32

DefWindowProcA
MessageBoxA
PostQuitMessage
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

OpenSCManagerA
CreateServiceA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegRestoreKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d48c7ba6509676dbbab7dd8e4e5446d6

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 21KB - Virtual size: 30KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 21KB - Virtual size: 30KB