1ff01155fb5967ff973416b2f97e4ecc

General

Target

1ff01155fb5967ff973416b2f97e4ecc
Size

21KB
MD5

1ff01155fb5967ff973416b2f97e4ecc
SHA1

cf1d328ae7590c775ab6c25c673fd0151a112202
SHA256

1c6a515d6e260fcd794a19f3294253adf4e6e6c537e0b5518de571ecdb82dfce
SHA512

2fea359968cc8ebc23d3a989aa48889beb57fd8c1c2503bffe8e17d7eaf7632bf77c14a0c4a7993c260f1611c83473921a83b345a28a9d7e6a303777cb4f51e0
SSDEEP

384:ATARVtQBCQRdZsZUbKd0ABKP44n7PtMma0pQiGrkah:ATARVSbnXLtMma0pyHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ff01155fb5967ff973416b2f97e4ecc

Files

1ff01155fb5967ff973416b2f97e4ecc
.exe windows:4 windows x86 arch:x86

ac9de4c35393bd7f38f5bf912c6d8f75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

wsock32

htons
inet_addr

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

rnel32

AddAtomA
CloseHandle
CopyFileA
CreateFileA
CreateRemoteThread
DeleteFileA
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetCurrentProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
OpenProcess
ReadFile
ReadProcessMemory
SetFilePointer
SetUnhandledExceptionFilter
Sleep
VirtualAllocEx
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory

vcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
free
getenv
malloc
memset
puts
signal
sprintf
strcpy

er32

FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac9de4c35393bd7f38f5bf912c6d8f75

Headers

File Characteristics

Imports

wsock32

advapi32

rnel32

vcrt

er32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 364B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 364B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB