f77cb3d3d2a46633122f3f5d39814d09

General

Target

f77cb3d3d2a46633122f3f5d39814d09
Size

52KB
MD5

f77cb3d3d2a46633122f3f5d39814d09
SHA1

1886dce19644efab16b50011e05b597648ebc026
SHA256

df90d2e7f8da64fa91dc3c31b366433c5965633d5e8b99b4495a17d5b8fa55c4
SHA512

d7e434bd97712666ff26ac3cb689afedd6aa1ef4a4a53c060c9ff3894b38eb73e2f5b04d6a380b78bed799dfe7790a8c67f85ce776a103f3fcd7be94ab71160a
SSDEEP

768:C+iOb0jesRmVTdCvkgn8PJu7QZ3h3FURPIdt8:C+TvricJkKnIkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f77cb3d3d2a46633122f3f5d39814d09

Files

f77cb3d3d2a46633122f3f5d39814d09
.exe windows:4 windows x86 arch:x86

2c46144b40b82b07238952e373d101d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetLastError
CreateMutexA
GetModuleFileNameA
GetStartupInfoA
GetEnvironmentVariableA
VirtualAlloc
CreateThread
TerminateProcess
VirtualFree
GetModuleHandleA
SetFilePointer
GetStringTypeW
GetStringTypeA
InterlockedExchange
ExitProcess
GetCurrentProcess
CloseHandle
lstrcpyA
GetVersionExA
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount
GlobalAlloc
GlobalFree
GetCurrentProcessId
OutputDebugStringA
Sleep
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
WriteFile
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
GetCommandLineA
GetVersion
HeapAlloc
FlushFileBuffers

user32

wsprintfA

advapi32

RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CreateServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
SetServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ws2_32

recv
WSAIoctl
connect
send
__WSAFDIsSet
closesocket
WSAStartup
WSASocketA
setsockopt
htons
htonl
sendto
inet_addr
gethostbyname
select
socket

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c46144b40b82b07238952e373d101d5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 21KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 21KB