121a015ec2056127c76ec7a01aae4a90

Sharing

Copy URL

Twitter E-mail

General

Target

121a015ec2056127c76ec7a01aae4a90
Size

46KB
MD5

121a015ec2056127c76ec7a01aae4a90
SHA1

aa2131e67aa915b4b81fe7e19df7d0dae3f721d2
SHA256

720f68e62957cb7a5818cb85525f57e7b46ba193b9dbfe80795799d6658a5447
SHA512

145a5cc63bfdf46e2f144d726fc489506583743662123f04caa801af4a441ac41520d10dd82abd140bf29035ee223e91ac0def4a54fc7c6cd772ed80c92bf02d
SSDEEP

768:KMoySvgBo8W3/YitL8+EwqBCm6NH6aJkDSRRSG9s4VDyNVr5xxoAIA8fosh86CZM:KMoSBO/h9iYhNHvaESGi4hyX1foAIA8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121a015ec2056127c76ec7a01aae4a90

Files

121a015ec2056127c76ec7a01aae4a90
.exe windows:4 windows x86 arch:x86

fd3e18f025769d05562f087180596c0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexA
SetFileTime
GetFileTime
CreateFileA
SearchPathA
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
WriteFile
GetTempPathA
ReleaseMutex
OpenMutexA
CopyFileA
lstrcatA
CreateEventA
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExA
GlobalMemoryStatus
lstrcpyA
lstrcpynA
lstrcmpA
SetThreadPriority
CreateProcessA
WaitForSingleObject
CloseHandle
LocalFree
SetEvent
GetModuleHandleA
lstrlenA
GetModuleFileNameA
CreateThread
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
TerminateThread
LeaveCriticalSection
ExitThread
ExitProcess
Sleep
GetSystemDirectoryA
GetTickCount

user32

GetWindowTextA
GetForegroundWindow
GetAsyncKeyState
wsprintfA
GetKeyState

advapi32

CreateServiceA
ChangeServiceConfig2A
StartServiceA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
DeleteService
ControlService
RegEnumKeyExA
SetServiceStatus

shell32

ShellExecuteA

odbc32

ord24
ord75
ord41
ord3
ord11
ord31

msvcrt

_strcmpi
_CxxThrowException
memcmp
__CxxFrameHandler
ceil
_snprintf
strcat
strrchr
fwrite
_strnicmp
strchr
sscanf
strtoul
strncat
sprintf
strstr
strcpy
??2@YAPAXI@Z
atoi
strcmp
strtok
_except_handler3
_ftol
vsprintf
strlen
memset
free
realloc
malloc
strncpy
memcpy
rand
srand
??3@YAXPAX@Z
fclose
fread
fopen
fseek
??1type_info@@UAE@XZ

wininet

InternetGetConnectedState

ws2_32

select
ntohl
accept
recvfrom
WSASocketA
__WSAFDIsSet
gethostbyaddr
getpeername
listen
bind
setsockopt
shutdown
inet_ntoa
gethostname
WSAStartup
WSAGetLastError
htons
socket
connect
recv
closesocket
send
WSACleanup
inet_addr
gethostbyname
htonl
sendto
ioctlsocket

oleaut32

GetErrorInfo

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd3e18f025769d05562f087180596c0a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

odbc32

msvcrt

wininet

ws2_32

oleaut32

Sections

.text Size: 44KB - Virtual size: 43KB

Size: 1KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB