258ec0f335f90f449e486142a631cd66

General

Target

258ec0f335f90f449e486142a631cd66
Size

31KB
MD5

258ec0f335f90f449e486142a631cd66
SHA1

1fe1729497acbfddad1c904ec42ff65952300ad2
SHA256

32eee90e736cb0cb5276252d0e800b3e091856d4a70022b934571e0f81232918
SHA512

a6fe53700c78a7fb9709cce3ba0aa52c14bc50266a2a8e11968706ac0f817b975d3e2580b61aade3a05bfa54581ae0b3e7c827d1fce08ad37d49ad66b7429a23
SSDEEP

768:11HXngAmtKJBiRSOGsBSiaBGsDR88izsrDMU:11HXn0C0kmYgcR89ODM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
258ec0f335f90f449e486142a631cd66

Files

258ec0f335f90f449e486142a631cd66
.exe windows:4 windows x86 arch:x86

2a85e5ab9912c6eb74d7102a7dbb59b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
bind
listen
__WSAFDIsSet
accept
select
setsockopt
ioctlsocket
WSAGetLastError
htons
socket
connect
send
recv
closesocket
inet_addr
gethostbyname

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
VirtualQuery
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
SetFileAttributesA
CopyFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
ExitProcess
WaitForSingleObject
CreateMutexA
GetTickCount
Sleep
CreateThread
VirtualAlloc
HeapAlloc
GetLocaleInfoA
VirtualProtect
HeapReAlloc
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetProcAddress
GetSystemInfo
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo

user32

wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2a85e5ab9912c6eb74d7102a7dbb59b8

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 2KB