037b37d96a4a3b1b152833bdf8eb2b7e

General

Target

037b37d96a4a3b1b152833bdf8eb2b7e
Size

64KB
MD5

037b37d96a4a3b1b152833bdf8eb2b7e
SHA1

b35dcaf8f3731f322b41017adf4d6d3b602e6d56
SHA256

b25d86e59299fb22e8b6f97cb14fd822171571ac8c914dd097ddffb195fc027c
SHA512

281f477208ed32d3e1261c0ebf49b888e43d2a30ab386b93b9c6e2b2731b282e2641c9e36e85730fa86df5c9afa3f11fccfde4074a7f46471d8ce44fba82da66
SSDEEP

1536:s0AemKphsdJkGk/g7MBqgtS7OPoFQWFR:hALasdKmMsgtyMo+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
037b37d96a4a3b1b152833bdf8eb2b7e

Files

037b37d96a4a3b1b152833bdf8eb2b7e
.exe windows:4 windows x86 arch:x86

bbafcbefe868aac780ce77332f38d34e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
GetLastError
CreateThread
CreatePipe
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
GetStdHandle
FreeConsole
VirtualAlloc
VirtualFree
SetEndOfFile
CreateFileA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
SetStdHandle
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetEnvironmentStringsW
HeapFree
HeapAlloc
CloseHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
FlushFileBuffers
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA

ws2_32

__WSAFDIsSet
select
send
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
getservbyport
ntohs
getservbyname
inet_addr
gethostbyname
inet_ntoa
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
recv
closesocket

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bbafcbefe868aac780ce77332f38d34e

Headers

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 33KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 33KB