4cd9206f4bc614b6c0669901bf3be6c0

Sharing

Copy URL Twitter E-mail

General

Target

4cd9206f4bc614b6c0669901bf3be6c0
Size

162KB
MD5

4cd9206f4bc614b6c0669901bf3be6c0
SHA1

39d7b54e8221ad9f2e44e5d3ce7b9d1afc6d04da
SHA256

161794ec15d79d288acbe38371ca2ef5730972a4ba45e7b3736fcd604bd926ec
SHA512

1717c70c7690405501fc5a1c73a76a03d603d0433e4430d171f739f4920541e473361bc99c8c5211768bdddcbce0e6ef0a787cd26d57d67c77e82ea9ad94b766
SSDEEP

3072:5UG3/XehVkuPRcz12+LYYa0sQ1z6QrQ9Mux1f0OYXzr5HKMAniZChP5:FPOhozI+mN6z65z7SX35HKbnia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd9206f4bc614b6c0669901bf3be6c0

Files

4cd9206f4bc614b6c0669901bf3be6c0
.exe windows:5 windows x86 arch:x86

0aab1e62cdef4870cf9602c0c41606fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorNode
GetCurrentThreadId
GetTickCount
RemoveDirectoryW
WriteProfileSectionA
VirtualProtectEx
GetHandleContext
GlobalWire
BuildCommDCBAndTimeoutsA
GetVolumePathNameW
QueryPerformanceCounter
CopyFileExA
GetComputerNameExW
GetFirmwareEnvironmentVariableW
GetCurrentProcessId
EnumResourceNamesW
GetVersionExW
HeapWalk
VirtualAlloc
ExpandEnvironmentStringsW
GetConsoleCommandHistoryW

imagehlp

SymRegisterCallback64
GetImageUnusedHeaderBytes
SymGetSymPrev64
SearchTreeForFile
SymLoadModule
ReBaseImage
ImageGetCertificateData
SymGetSymNext
SymMatchFileName
ReBaseImage64
SymGetTypeInfo
ImageDirectoryEntryToDataEx
SymGetLineFromName64
UpdateDebugInfoFileEx

msorcl32

SQLPutData
SQLNativeSql
SQLNumParams
SQLColAttributes
SQLDescribeCol
SQLSetScrollOptions
LoadByOrdinal
SQLExtendedFetch
SQLSetStmtOption
SQLFreeEnv
SQLAllocEnv
SQLForeignKeys
SQLGetStmtOption

opengl32

glEvalCoord2dv
glBitmap
glVertex2fv
glTexImage2D
glVertex3f
glTexGendv
glPixelMapusv
wglRealizeLayerPalette
glRectf
glPopName
glArrayElement
glGetFloatv
glEvalCoord1d
glRectfv
glVertex4dv
wglUseFontOutlinesA
glColor3ubv

msvcrt20

?gcount@istream@@QBEHXZ
_adj_fdivr_m64
strncmp
?putback@istream@@QAEAAV1@D@Z
_finite
??_Dostream@@QAEXXZ
?ipfx@istream@@QAEHH@Z
?base@streambuf@@IBEPADXZ
_mbsnicoll
?sync@stdiobuf@@UAEHXZ
_cscanf
system
?sgetn@streambuf@@QAEHPADH@Z
atof
strstr

rpcns4

I_RpcNsGetBuffer
I_RpcNsRaiseException
RpcNsGroupMbrAddA
RpcNsBindingUnexportPnPW
RpcNsProfileEltInqDone
RpcNsBindingLookupDone
RpcNsMgmtSetExpAge
RpcNsBindingExportA
RpcNsMgmtEntryInqIfIdsA
RpcNsProfileEltRemoveW
RpcNsBindingImportDone
RpcNsProfileEltAddW
I_RpcNsNegotiateTransferSyntax
RpcNsEntryObjectInqDone
RpcNsEntryObjectInqBeginA
RpcNsBindingUnexportW
RpcNsMgmtEntryCreateA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idat_09
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0aab1e62cdef4870cf9602c0c41606fd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

imagehlp

msorcl32

opengl32

msvcrt20

rpcns4

Sections

.text Size: 77KB - Virtual size: 76KB

.idat_09 Size: 39KB - Virtual size: 39KB

.data Size: 41KB - Virtual size: 42KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 77KB - Virtual size: 76KB

.idat_09
Size: 39KB - Virtual size: 39KB

.data
Size: 41KB - Virtual size: 42KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 436B