1b927422d9966383a46f77eb3cd59443

Sharing

Copy URL Twitter E-mail

General

Target

1b927422d9966383a46f77eb3cd59443
Size

23KB
MD5

1b927422d9966383a46f77eb3cd59443
SHA1

3f3b3bdb4a48426a9c8d1a616942f25d81cae9a0
SHA256

cac2b4d2f1fa50fa5f77c3bfd3190f646a29c1619363be866e7694afc72e79c8
SHA512

cbef697a41336514bd20c37fb7b2b1933f0c0595d545a3287fdc5305bf2d77a3a9ba261f1da4f347c98f96f76d8600c36bd5e2e0c07956322bf03eabd242a60e
SSDEEP

384:l2rSfr9TZuRI7UtPuo/UUhm07o22RL8BumSAvfDZesujXZ6p:QqtyPuosiVUdRvAvNesuW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b927422d9966383a46f77eb3cd59443

Files

1b927422d9966383a46f77eb3cd59443
.dll windows:4 windows x86 arch:x86

73f3d75cb3204fbee8bc77d4a7000ebb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

inet_addr
gethostbyname
recv
closesocket
inet_ntoa
WSAStartup
ioctlsocket
htons
socket
connect
WSACleanup
send

user32

GetClassNameA
GetWindowTextA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
VkKeyScanA
keybd_event
wsprintfA
BlockInput
SetForegroundWindow
SetFocus
ShowWindow

advapi32

OpenProcessToken
ImpersonateLoggedOnUser
EnumServicesStatusA
OpenSCManagerA
CloseServiceHandle

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
free
atoi
strtok
exit
fopen
fwrite
fclose
time
malloc
strncpy
srand
rand
__CxxFrameHandler
strcmp
strstr
memcpy
toupper
strlen
strcpy
sprintf
memset
strcat
??3@YAXPAX@Z
??2@YAPAXI@Z

kernel32

CreateThread
CreateProcessA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLastError
GetLocaleInfoA
OpenProcess
lstrcmpiA
Sleep
GetTickCount
InterlockedDecrement
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
CreateMutexA
DisableThreadLibraryCalls
MultiByteToWideChar
CloseHandle

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73f3d75cb3204fbee8bc77d4a7000ebb

Headers

File Characteristics

Imports

wsock32

user32

advapi32

wininet

ole32

oleaut32

psapi

msvcrt

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB