4c0bba33ec71a1020d8592d74bc6a717

Sharing

Copy URL

Twitter E-mail

General

Target

4c0bba33ec71a1020d8592d74bc6a717
Size

173KB
MD5

4c0bba33ec71a1020d8592d74bc6a717
SHA1

d1520fff993fd62ae8f219e5d86105a95a15c61e
SHA256

98b96e36381582e635ac6ba97d3a6d93265f71ce9c422a7f7f87e37453a64096
SHA512

30d2525f52b3ef90ddab2079e42dad795eb675ae9f43f832111c75f32613b6371d6eb5e9e4007768a1254337cf478be32dcf1eb4f069fd8ceb434ca1772647d4
SSDEEP

3072:lvplqCR++VU96dFoACdhwLwxla3FZIdNJoZydMoFoR6SGgVZoDf5U:lRlqr1UDo9d2oO0okjy6S9Sfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0bba33ec71a1020d8592d74bc6a717

Files

4c0bba33ec71a1020d8592d74bc6a717
.exe windows:4 windows x86 arch:x86

dda55e8140502d2620e34304f632ee73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
WSACleanup
setsockopt
ioctlsocket
bind
listen
accept
closesocket
WSAStartup
gethostbyname
htons
connect
recv
socket
send
select
__WSAFDIsSet

kernel32

CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetTickCount
ExitThread
Sleep
GetSystemDirectoryA
GetLocalTime
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
GetLastError
CreateThread
GetFileSize
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
SetFileTime
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
GetVersionExA
GlobalMemoryStatus
ExitProcess
WideCharToMultiByte
GetComputerNameA
GetCurrentProcess
TerminateProcess
DeleteFileA
GetCurrentProcessId
CopyFileA
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
GetLocaleInfoA
GetLogicalDrives
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RaiseException
HeapSize
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dda55e8140502d2620e34304f632ee73

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 46KB - Virtual size: 363KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 46KB - Virtual size: 363KB