33761e05b943591916afc38406c18ef6

General

Target

33761e05b943591916afc38406c18ef6
Size

150KB
MD5

33761e05b943591916afc38406c18ef6
SHA1

f0a0658d7831fa7b69e328c26daa1ee09e6d32c3
SHA256

7de5f672aa49013ab7d2094fb2821ef8a5ce1339762ca5561e9c7a59e4ad3312
SHA512

8495b7332e3486a9e1f986a72d74edfc98e842cb5e3fbba94d0aa2da23036bda060e2101cf1e4f2f6a3b86b9c301992fd98172df8d6c9d9e2ae0f1d5ce20f470
SSDEEP

3072:Y9xQohVw42aV6qtC/IUmtPyWfHRVj6Pp2tHyp/tco0y:Y9nVT2aVlOzWpVOPp2tSjZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33761e05b943591916afc38406c18ef6

Files

33761e05b943591916afc38406c18ef6
.exe windows:5 windows x86 arch:x86

e215c13270c5c766547a756b4079af9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rtutils

TracePutsExA
TraceDeregisterA
TraceDeregisterExA
TracePrintfExA
TraceRegisterExA
TracePrintfA
TraceDumpExA

ntdll

NtDeviceIoControlFile
NtCreateSemaphore
wcsncpy
NtClose
RtlAllocateHeap
NtCreateFile
NtOpenFile
wcsstr
NtAllocateVirtualMemory
NtWaitForSingleObject
RtlNtStatusToDosError
RtlFreeHeap
RtlUnwind

advapi32

RegisterServiceCtrlHandlerA
ControlService
SetServiceStatus
OpenSCManagerA
RegSetValueExW
CloseServiceHandle
StartServiceA
QueryServiceStatus

kernel32

SetLastError
InterlockedIncrement
lstrcpyW
DeviceIoControl
EnterCriticalSection
CreateEventA
DeleteCriticalSection
SleepEx
GetOverlappedResult
ResetEvent
GlobalAlloc
SetEvent
BindIoCompletionCallback
GetLastError
LeaveCriticalSection
PostQueuedCompletionStatus
GetSystemTimeAsFileTime
WaitForSingleObject
GetQueuedCompletionStatus
Beep
GlobalFree
lstrlenW
Sleep

ws2_32

WSARecvFrom

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e215c13270c5c766547a756b4079af9e

Headers

DLL Characteristics

File Characteristics

Imports

rtutils

ntdll

advapi32

kernel32

ws2_32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 139KB - Virtual size: 139KB

.reloc Size: 512B - Virtual size: 28B

.data Size: 1KB - Virtual size: 352KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 139KB - Virtual size: 139KB

.reloc
Size: 512B - Virtual size: 28B

.data
Size: 1KB - Virtual size: 352KB