74972977e3c3c0866326cfd95db07e55

Sharing

Copy URL Twitter E-mail

General

Target

74972977e3c3c0866326cfd95db07e55
Size

24KB
MD5

74972977e3c3c0866326cfd95db07e55
SHA1

aaee0a166e696dee678642b158b6b7a7f6530a37
SHA256

e4be5e3fe304de011cc1978c587609039500c7739920a7954c61fd3ba7a57926
SHA512

248e73d6857960d75d305cc58674dbf69a85a1a2e96ab08defaea86fa5d708dae604517ff11a6240aef94de3e819509762ff49e0fcb974b6798d5ab79ac8a485
SSDEEP

384:mn0jdomCTQcrR1pdoOJCx1BdyadGj5h8BFTm1X2:mn7VrRzdQwGFTmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74972977e3c3c0866326cfd95db07e55

Files

74972977e3c3c0866326cfd95db07e55
.exe windows:4 windows x86 arch:x86

31b9880b5bc074595c8dc3a2f955d556

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetTickCount
GetVersionExA
Sleep
EnterCriticalSection
lstrcpynA
GetComputerNameA
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
LoadLibraryA
LeaveCriticalSection
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetProcAddress
GetModuleHandleA
GetStartupInfoA

user32

wsprintfW
SetDlgItemInt
SendDlgItemMessageA
PostMessageA
GetFocus
GetDlgItemTextA
EnableWindow
GetDlgItem
SetWindowTextA
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessagePos
ScreenToClient
LoadBitmapA
UnregisterClassA
SetFocus
EndDialog
wsprintfA
GetSysColor
DialogBoxParamA
GetClassInfoExA
LoadIconA
RegisterClassExA
SendMessageA
SetDlgItemTextA

gdi32

DeleteObject
SetTextColor
CreateFontIndirectA
CreateSolidBrush
SetBkColor

shell32

ShellExecuteA

ws2_32

WSAAsyncGetHostByName
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAEventSelect
htons
connect
WSACloseEvent
closesocket
socket
gethostbyaddr
WSAAsyncGetHostByAddr
WSAGetLastError
gethostname
ntohl
htonl
inet_ntoa
inet_addr
gethostbyname
WSACleanup
WSACreateEvent
WSAStartup

comctl32

InitCommonControlsEx
ImageList_AddMasked
ImageList_Create
ImageList_Destroy

msvcrt

_controlfp
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_beginthreadex
fprintf
_iob
vsprintf
printf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__set_app_type
__p__fmode
strtok

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31b9880b5bc074595c8dc3a2f955d556

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ws2_32

comctl32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 3KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 3KB

.rsrc
Size: 11KB - Virtual size: 11KB