22d8fcd774b35c9480df44dcc81b0880

General

Target

22d8fcd774b35c9480df44dcc81b0880
Size

60KB
MD5

22d8fcd774b35c9480df44dcc81b0880
SHA1

bd08cc3f1ef5c468cf9408e2b64b8876596f15d1
SHA256

794c525f8ef11e769e466454613d9fb3b75d5984967282db6cc02e156eb01200
SHA512

6d125e28829e6183a55e5ad448a277160696f38052b03ff5dd761fcbca01fbafd194c1a874fe17858760e5e0482a5f0223f38d685ee191c0802145e9e235b2e7
SSDEEP

768:ILLHjcNvkGdY7Oo4IjX3r+5qcLqw57Tx7taOvmCKuWSv5yP/2oZ9s:ibwKGpoFjCNx7YvCwA5yWoX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22d8fcd774b35c9480df44dcc81b0880

Files

22d8fcd774b35c9480df44dcc81b0880
.exe windows:4 windows x86 arch:x86

bcdedaba91c0536617ddba8315bf6920

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapReAlloc
HeapSize
CompareStringW
CompareStringA
SetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetProcAddress
GetOEMCP
LoadLibraryA
GetACP
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
Sleep
GetCPInfo
VirtualFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
IsBadWritePtr
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
VirtualAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW

wpcap

pcap_open_live
pcap_sendpacket
pcap_loop
pcap_freealldevs
pcap_findalldevs

ws2_32

inet_ntoa
WSAStartup
gethostbyname

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bcdedaba91c0536617ddba8315bf6920

Headers

File Characteristics

Imports

kernel32

wpcap

ws2_32

netapi32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 12KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 12KB