115b8d5724eadd153d530827f4399ec1

General

Target

115b8d5724eadd153d530827f4399ec1
Size

12KB
MD5

115b8d5724eadd153d530827f4399ec1
SHA1

36235b8b10cf9fced4b70f300beeca30a1f306be
SHA256

d3fa480faef9b3bd5ebb7ad610dce915059a6a247b5af4400c92ac137f4b32f2
SHA512

f5a58b47ba30d69cf062b39b10a6d36d38fb7c664d98ce64348405c34f1009d94a7b583ecf1e49c043ca2e4714d485d3f3cf05c7054897f3bfed56d0165cc9fb
SSDEEP

96:dO5Djv+9hm2WrzbMZywwczBboPinAQRKvrZvz:k5DjqhRWPQy0oOAQR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
115b8d5724eadd153d530827f4399ec1

Files

115b8d5724eadd153d530827f4399ec1
.dll windows:1 windows x86 arch:x86

f99d9ac8e36cb686b157c1580668fabf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

wsprintfA

kernel32

CreateHandle
FetchTrueHandle
ExitThread

Exports

Exports

CreateUrlCacheEntryA
DeleteUrlCacheEntry
DeleteUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FtpCreateDirectoryA
FtpFindFirstFileA
FtpGetCurrentDirectoryA
FtpGetFileA
FtpOpenFileA
FtpPutFileA
FtpRenameFileA
FtpSetCurrentDirectoryA
HttpAddRequestHeadersA
HttpEndRequestA
HttpOpenRequestA
HttpOpenRequestW
HttpQueryInfoA
HttpSendRequestA
HttpSendRequestW
InternetAttemptConnect
InternetAutodial
InternetAutodialHangup
InternetCanonicalizeUrlA
InternetCheckConnectionA
InternetCloseHandle
InternetConnectA
InternetConnectW
InternetCrackUrlA
InternetCrackUrlW
InternetErrorDlg
InternetFindNextFileA
InternetGetConnectedState
InternetGetConnectedStateEx
InternetGetLastResponseInfoA
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetQueryOptionA
InternetReadFile
InternetSetFilePointer
InternetSetOptionA
InternetSetStatusCallback
InternetWriteFile

Sections

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f99d9ac8e36cb686b157c1580668fabf

Headers

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

CODE Size: 2KB - Virtual size: 4KB

DATA Size: 4KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.edata Size: 2KB - Virtual size: 4KB

CODE
Size: 2KB - Virtual size: 4KB

DATA
Size: 4KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.edata
Size: 2KB - Virtual size: 4KB