1e94f52b4660a9692c8ae2f86bfe8c34

Sharing

Copy URL

Twitter E-mail

General

Target

1e94f52b4660a9692c8ae2f86bfe8c34
Size

252KB
MD5

1e94f52b4660a9692c8ae2f86bfe8c34
SHA1

47e416c1b02be4039be022563a65316f580b3771
SHA256

f88910dc5b4324d2633bab63e013cc1792f1fc8d1f4c32a92c90aa44eaccb4a4
SHA512

d0e28f1a939457c462fe0c5d79127e17bb8135c89c1798ac4b1674650da6374dce4142c0872d0092db4f082b692b4547d9189a0ceb6a6f833b9ff5ab3c3d88a7
SSDEEP

6144:Gg9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:jSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e94f52b4660a9692c8ae2f86bfe8c34

Files

1e94f52b4660a9692c8ae2f86bfe8c34
.exe windows:4 windows x86 arch:x86

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
inet_addr
gethostname
gethostbyname

iphlpapi

GetBestInterface
GetIpAddrTable

kernel32

GetProcessHeap
TlsAlloc
InitializeCriticalSection
WaitForSingleObject
lstrcpyW
lstrlenW
GetLastError
CreateEventW
CreateMutexW
GetCurrentProcessId
FreeLibrary
GlobalAlloc
LoadLibraryW
ExpandEnvironmentStringsW
SetEvent
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
ExitProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
HeapCreate
Sleep
GetFileAttributesW
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentThread
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
GetLocaleInfoW
GetVersion
GetProcAddress

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

netapi32

NetReplGetInfo
NetUseGetInfo

user32

CharNextA
GetMenuStringA
SetWindowTextA
WaitMessage
CreateDialogParamA
DialogBoxIndirectParamW
GetCapture
CreatePopupMenu
LoadBitmapA
CharNextW
SetFocus
SendMessageW
GetActiveWindow
CharLowerA
CreateWindowExW
InsertMenuItemA
GetKeyboardLayout
IsMenu
SetCursor
GetMenuItemInfoA
RegisterWindowMessageA
CharUpperW
LoadMenuA
SetCapture
CopyIcon
LoadMenuIndirectA
EmptyClipboard
SetDlgItemInt
CreateWindowExA
SetForegroundWindow
ShowWindow
DefWindowProcW
GetMenu
GetWindowRgn
TrackPopupMenu
PostQuitMessage
GetCursorPos

gdi32

GetStockObject
RemoveFontResourceW
CreateBitmap
DeleteObject
CreateFontW
CreateDIBPatternBrushPt
CreateScalableFontResourceW

Sections

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aaIrfj
Size: 104KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E
Size: 110KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9e532bee60319c34dd4f051b70ae406

Headers

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

advapi32

netapi32

user32

gdi32

Sections

.edata Size: 6KB - Virtual size: 5KB

.rdata Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 12KB

.aaIrfj Size: 104KB - Virtual size: 187KB

.data Size: 6KB - Virtual size: 102KB

.E Size: 110KB - Virtual size: 124KB

.rsrc Size: 9KB - Virtual size: 8KB

.edata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 12KB

.aaIrfj
Size: 104KB - Virtual size: 187KB

.data
Size: 6KB - Virtual size: 102KB

.E
Size: 110KB - Virtual size: 124KB

.rsrc
Size: 9KB - Virtual size: 8KB