742cda4e044c9c7389b529eef5a4727b

General

Target

742cda4e044c9c7389b529eef5a4727b
Size

9KB
MD5

742cda4e044c9c7389b529eef5a4727b
SHA1

4a6a8973a042b37f07df6a60af969d576b6c083e
SHA256

34c1d4fd2feaac141c90be253d9319fbb77b4f3af5c0825b8e18ba51eedc3d99
SHA512

5e01fc0a1e4a0ac5d24cb436efeda121ec9ea51702ac295c84c438f2a6c842734f468b20b0798ab1311241ec4c25c6e208bfaebbe4911b8f996b8df5473e789f
SSDEEP

192:4ge/kpp3YiScfSu/p/rBGU/BLqES5CqpefT5EU4P1oynPEG/0mWU0S0:9I5SfSudrAUQZpAT5ru1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742cda4e044c9c7389b529eef5a4727b

Files

742cda4e044c9c7389b529eef5a4727b
.exe windows:4 windows x86 arch:x86

81c279a91a25e01ce08bb75dc93f735b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetWindowsDirectoryA
GetShortPathNameA
GetStartupInfoA
GetModuleHandleA
lstrcatA
CreateMutexA
CopyFileA
WaitForSingleObject
CloseHandle
GetVersion
ExitProcess
CreateThread
DeleteFileA
GetVersionExA
Sleep
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA

ws2_32

htons
socket
send
inet_addr
select
WSAStartup
gethostbyname
connect
closesocket
recv

shell32

ShellExecuteA

advapi32

ChangeServiceConfig2A
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
CreateServiceA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
StartServiceCtrlDispatcherA
DeleteService

user32

wsprintfA

msvcrt

strcmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
memset
strlen
sprintf
fclose
fwrite
fopen
rand
srand
strcpy
atoi
_strnicmp
strtok
strncpy
strstr
strcat
_exit
_XcptFilter
exit
_acmdln

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81c279a91a25e01ce08bb75dc93f735b

Headers

File Characteristics

Imports

kernel32

ws2_32

shell32

advapi32

user32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 1KB - Virtual size: 1KB