46e2cdb303a6a50fb9377f9f894b59f3

General

Target

46e2cdb303a6a50fb9377f9f894b59f3
Size

224KB
MD5

46e2cdb303a6a50fb9377f9f894b59f3
SHA1

ca2d7d49e75084d5c473af650e198dbd9e565e97
SHA256

04d185a50e8293fd7149b4dfc803b96d87329fd2abc8ba8adca7282773d31082
SHA512

7e83023b5231aa140cd2046d9e55c34913c36d38b34ff07a6eb35558d3f42a377adef562ddb8d9ac29392b5460f7ed2263228da9a8bf64cc2f7c49f043dc78b1
SSDEEP

6144:BwQTmv/8O4MZT6kyhTnCwn7WksQ4HeFxP+xIVZh:GgmvVZTKhTnCkqHevmxIVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46e2cdb303a6a50fb9377f9f894b59f3

Files

46e2cdb303a6a50fb9377f9f894b59f3
.exe windows:4 windows x86 arch:x86

8e815e431d9c1c09806769f2f8fac7d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAWaitForMultipleEvents
WSAEnumNetworkEvents

rasapi32

RasEnumConnectionsA
RasGetConnectStatusA

tapi32

lineOpenA
lineTranslateAddressA
lineShutdown
lineClose
lineHold
lineTranslateDialogA
lineInitializeExA

loadperf

SetServiceAsTrustedA

kernel32

GetModuleFileNameA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetConsoleCtrlHandler
VirtualQuery
InterlockedExchange
Sleep
CreateProcessA
CloseHandle
GetStartupInfoA
DeleteFileA
GetTickCount
WriteConsoleW
GetWindowsDirectoryA
RtlUnwind
RaiseException
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo

Exports

Exports

SysterBrosd

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8e815e431d9c1c09806769f2f8fac7d1

Headers

File Characteristics

Imports

ws2_32

rasapi32

tapi32

loadperf

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 140KB - Virtual size: 523KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 140KB - Virtual size: 523KB