4858d51c72afd9cad7bc1ddfdf20894b

Sharing

Copy URL Twitter E-mail

General

Target

4858d51c72afd9cad7bc1ddfdf20894b
Size

84KB
MD5

4858d51c72afd9cad7bc1ddfdf20894b
SHA1

4b060d7f3b91c72a57eca0c6d03016445eb3e05e
SHA256

cb685d62e6cdc83d47468f213d9d027f2cc8e3c3a0ed52d1c264ef0ccaa81c37
SHA512

3701c3e4e45f68349c59221d3537f9d6ca4c7eefbba30e234ef54a20514a950aad7ac3a679f08a25919ee54181256d6c14a13596140bd1a6084dbbd342838c6f
SSDEEP

1536:Jy3hdu2QT7+5gBiSX6ooaZq/9qRvYPWprgkoO:JCu2uSNCoaZq/2vYPugkoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4858d51c72afd9cad7bc1ddfdf20894b

Files

4858d51c72afd9cad7bc1ddfdf20894b
.exe windows:4 windows x86 arch:x86

fbb7e93cd6cede1a5eb4f7982c5d643c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetSystemDirectoryA
Sleep
GetVersionExA
GetComputerNameA
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
SetFileAttributesA
CreateFileA
SetStdHandle
SetConsoleCtrlHandler
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeA
FindFirstFileA
HeapFree
HeapReAlloc
HeapAlloc
ReadFile
GetFileType
SetHandleCount
FlushFileBuffers
GetCurrentProcess
SetFilePointer
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
SetEndOfFile
WriteFile
GetStdHandle
GetLastError
MoveFileA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak

user32

TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
TranslateMessage
LoadCursorA
LoadIconA
SetTimer
UpdateWindow
ShowWindow
RegisterClassExA
wsprintfA
GetAsyncKeyState
GetForegroundWindow
GetWindowTextA
DispatchMessageA
OpenClipboard
GetClipboardData
CloseClipboard
DefWindowProcA
CreateWindowExA

advapi32

GetUserNameA

shell32

ShellExecuteA

wininet

InternetGetConnectedState

wsock32

WSACleanup
gethostbyname
WSAStartup
send
recv
connect
htons
closesocket
socket
ioctlsocket

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbb7e93cd6cede1a5eb4f7982c5d643c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

wsock32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB