5e4c68c2236af4461cab5519b8d56f13

General

Target

5e4c68c2236af4461cab5519b8d56f13
Size

160KB
MD5

5e4c68c2236af4461cab5519b8d56f13
SHA1

e78eea5c6b7053d31993cf2e39b08c6c18db0090
SHA256

12efd85381a220e83cca87d114941e2f3672c9e77e4f4be0a3d984bdd8e060c6
SHA512

c1cc415c7810eb6c21a18abe42d4b74d1f4d912431c9b3118c6996e9c522f937d2632e1acf22dbbf0459430aeba40af56b381d4bb1ad1ec3216070e1f2e30a83
SSDEEP

3072:h9OLrD94vlO3LxExTufuplTnPzV8Lw8Bu/oDvL69Qweb6:hULrD3SxTu2pNqLw8ooz+9QJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4c68c2236af4461cab5519b8d56f13

Files

5e4c68c2236af4461cab5519b8d56f13
.dll windows:4 windows x86 arch:x86

e4ca9f7f8cda20eb927d8aa8699ece4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

recv
ntohs
gethostbyname
gethostname
send
htons
connect
closesocket
select
__WSAFDIsSet
htonl
socket
bind
getsockname
listen
accept
ioctlsocket
ntohl
inet_addr

user32

SendMessageTimeoutA
DestroyWindow

msvcrt

fread
fflush
fgets
_open
_close
_read
fgetc
_write
_adjust_fdiv
strchr
_initterm
time
sscanf
fwrite
strncmp
sprintf
mktime
exit
fopen
perror
malloc
tolower
free
_pctype
_isctype
__mb_cur_max
vsprintf
vfprintf
localtime
_except_handler3
strtok
ftell
fprintf
fclose
fseek

kernel32

ReleaseSemaphore
CreateSemaphoreA
WaitForSingleObject

Exports

Exports

rnt_destroywinconsole
rnt_initconsolestream
rnt_initfilename
rnt_initfilestream
rnt_initnetscapestream
rnt_initstringstream
rnt_initwinconsolestream
rnt_netscapeclose
rnt_netscapewrite
rnt_netstream_canread
rnt_netstream_canwrite
rnt_netstream_errorlog
rnt_netstream_hasregisteredprotocol
rnt_netstream_httpfilemodified
rnt_netstream_parseurl
rnt_openurl
rnt_setstringstream
rnt_stream_errorlog
rntio_malloc

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4ca9f7f8cda20eb927d8aa8699ece4a

Headers

File Characteristics

Imports

wsock32

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 1KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 112KB - Virtual size: 112KB