1c8162a8b252eddf40d903cfba41b994

General

Target

1c8162a8b252eddf40d903cfba41b994
Size

70KB
MD5

1c8162a8b252eddf40d903cfba41b994
SHA1

8a8331dcae8c34c8b2d7e43cc1a1e55495cfa0f9
SHA256

8ae5b467e1293de4c05d121a7a12ea7d6747e1ef4f524a17d09ed23d844b2945
SHA512

3a5077a78d99276c89203d7202f00cb8ee3a698edacaea6afbf9cdfbe5dd303f869c8f7e439a98f2f7e536c6cec3e9eebaae8ea7d39c243cd52a256a0084cc9f
SSDEEP

1536:DoX85tnZOsg3Wv+RkK3YKotfO6xHBPLF+l768laljn5i7KQj:7nZBgkTKIKotfO6pBJ+Q8wJno2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8162a8b252eddf40d903cfba41b994

Files

1c8162a8b252eddf40d903cfba41b994
.exe windows:4 windows x86 arch:x86

9c9dd2d3becbb542a261590d557f6326

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
lstrlenA
VirtualFree
VirtualProtectEx
GetCurrentProcess
WaitForSingleObject
ResumeThread
SetThreadContext
GetThreadContext
lstrcatA
lstrcpyA
GetComputerNameA
GetVolumeInformationA
GetProcAddress
GetModuleHandleA
CreateDirectoryA
LoadLibraryA
DeleteFileA
GetTempFileNameA
GetCurrentThread
CreateThread
CloseHandle
lstrcmpA
CreateMutexA
ExitProcess
GetCurrentProcessId
GetLastError
lstrcpynA
InitializeCriticalSection
HeapAlloc
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryExA
VirtualAlloc
SetPriorityClass
GetStringTypeA
LCMapStringW
SetThreadPriority
GetVersionExA
GetTickCount
lstrcmpiA
Sleep
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

user32

wsprintfA

advapi32

RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA

ws2_32

connect
ioctlsocket
socket
sendto
htonl
htons
setsockopt
WSASocketA
WSAGetLastError
send
inet_ntoa
WSAStartup
getsockopt
shutdown
accept
bind
select
recv
closesocket
inet_addr
gethostbyname
__WSAFDIsSet

ntdll

RtlUnwind

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c9dd2d3becbb542a261590d557f6326

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

ntdll

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 145KB

.rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 145KB

.rsrc
Size: 26KB - Virtual size: 26KB