2214e2f77e75e98adfec7bad7d61bad0

Sharing

Copy URL Twitter E-mail

General

Target

2214e2f77e75e98adfec7bad7d61bad0
Size

98KB
MD5

2214e2f77e75e98adfec7bad7d61bad0
SHA1

21f888346bf4519481b213244c8a85beb6c27ee8
SHA256

2d165faf0c37d02019bd7bb6631f2576570eff73e02e11e6901d25a76314b265
SHA512

0cf612928ee1e47f27bac3c488fa7ea183b53a230be8fd1a86a9d0a011ace0e38633bb928b3a2118a9cd04cedf53ff871b431900f7fe9e77a95303ef48c25771
SSDEEP

3072:7Igr3MwCVEJ+cWNgnUnmnQnsnDeZ9hstkuPzFsm:7IgrCivWgnUnmnQnsnDeGiurH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2214e2f77e75e98adfec7bad7d61bad0

Files

2214e2f77e75e98adfec7bad7d61bad0
.dll windows:3 windows x86 arch:x86

cef1a5f8123069d522b70b7cc370371f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateProcessA
CreateThread
DeleteFileA
ExitThread
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetSystemTime
GetTempPathA
GetTickCount
GetVersion
GetVolumeInformationA
GlobalLock
GlobalUnlock
IsBadReadPtr
LoadLibraryA
MapViewOfFile
OpenEventA
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
Sleep
SystemTimeToFileTime
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WriteFile
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
GetEnvironmentVariableA
GetLocalTime
GetLocaleInfoA
GetTimeZoneInformation
GetWindowsDirectoryA
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetFileTime
GetLogicalDrives
SetFileTime
CreatePipe
DuplicateHandle
GetExitCodeProcess
PeekNamedPipe
TerminateProcess
TerminateThread
FormatMessageA
GetFileType
GetPrivateProfileSectionA
MoveFileA
VirtualAlloc
VirtualFree
WritePrivateProfileSectionA

wsock32

getsockname
shutdown
send
recv
listen
inet_ntoa
connect
bind
WSAAsyncSelect
gethostname
inet_addr
ioctlsocket
closesocket
accept
WSAStartup
WSAGetLastError
WSACleanup
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
socket

user32

OemToCharBuffA
CharToOemBuffA
ExitWindowsEx
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SendMessageA
RegisterClassA
PostThreadMessageA
PostMessageA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxA
IsClipboardFormatAvailable
GetWindowThreadProcessId
GetWindowTextA
CallNextHookEx
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EnumWindows
FindWindowA
GetActiveWindow
GetClassNameA
GetClipboardData
GetMessageTime
GetParent

shell32

ShellExecuteA

Exports

Exports

DebugBreakpoint
DebugInit
Init
InitService
SpawnedInit
Uninstall

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cef1a5f8123069d522b70b7cc370371f

Headers

File Characteristics

Imports

advapi32

kernel32

wsock32

user32

shell32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 512B - Virtual size: 172B

.data Size: 16KB - Virtual size: 16KB

.idata Size: 3KB - Virtual size: 3KB

shared Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 512B - Virtual size: 172B

.data
Size: 16KB - Virtual size: 16KB

.idata
Size: 3KB - Virtual size: 3KB

shared
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB