286fbf30e5ebd306f324ec0635eca1a5

Sharing

Copy URL Twitter E-mail

General

Target

286fbf30e5ebd306f324ec0635eca1a5
Size

259KB
MD5

286fbf30e5ebd306f324ec0635eca1a5
SHA1

97e2589431b9e2095e078e1e0baa44ed2e53db6d
SHA256

345d0677a00682f2c599c309d51c2742019c8afa9287be64cc2bf3c8906e527f
SHA512

e7d2618b6130c4f70c95c268f4a4f9f8c90f7c3ceb3ff3d67ddbfbe9bff2ee700df28d8bd32ead3d74aba8e94546bdc4b4c8500e33519ce069e3da6a25f90616
SSDEEP

6144:86sLroZp1rpq8SqIgyt9xAqPTEyMbZgpu87GE7ifK+:8BroiKI/fpTEZg02Wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286fbf30e5ebd306f324ec0635eca1a5

Files

286fbf30e5ebd306f324ec0635eca1a5
.exe windows:4 windows x86 arch:x86

6aab68ac1399d8e9fba0f351ef5fa357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
ntohs
WSAGetLastError
WSAStartup
WSACleanup
gethostbyaddr
inet_ntoa
inet_addr

iphlpapi

SendARP

kernel32

lstrlenW
lstrlenA
SystemTimeToFileTime
GetLocalTime
CreateEventA
WaitForSingleObject
GetExitCodeThread
WaitForMultipleObjects
FreeLibrary
OpenMutexA
GetCurrentThreadId
CreateSemaphoreA
OpenEventA
OpenSemaphoreA
GetModuleHandleA
FileTimeToSystemTime
GetSystemTime
FindResourceA
LoadResource
RaiseException
GetThreadLocale
GetACP
GetProcessHeap
CreateMutexA
lstrcmpA
GetProcAddress

advapi32

CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegCreateKeyExA
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptGetProvParam
CryptDeriveKey
CryptGetHashParam

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysStringByteLen
VariantInit
VarBstrCmp
SysStringLen
SysFreeString
SysAllocString
VariantClear

quartz

AMGetErrorTextW
DllCanUnloadNow
DllUnregisterServer
DBToAmpFactor
DllGetClassObject
AMGetErrorTextA

wship6

WSHGetSocketInformation

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VI
Size: 1024B - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ep
Size: 2KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IG
Size: 101KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SJWMGu
Size: 4KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zTqxuS
Size: 5KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qwsfZ
Size: 113KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aab68ac1399d8e9fba0f351ef5fa357

Headers

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

advapi32

ole32

oleaut32

quartz

wship6

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 20KB

.VI Size: 1024B - Virtual size: 134KB

.ep Size: 2KB - Virtual size: 58KB

.IG Size: 101KB - Virtual size: 130KB

.SJWMGu Size: 4KB - Virtual size: 101KB

.zTqxuS Size: 5KB - Virtual size: 1.1MB

.data Size: 6KB - Virtual size: 295KB

.qwsfZ Size: 113KB - Virtual size: 156KB

.T Size: 1024B - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 20KB

.VI
Size: 1024B - Virtual size: 134KB

.ep
Size: 2KB - Virtual size: 58KB

.IG
Size: 101KB - Virtual size: 130KB

.SJWMGu
Size: 4KB - Virtual size: 101KB

.zTqxuS
Size: 5KB - Virtual size: 1.1MB

.data
Size: 6KB - Virtual size: 295KB

.qwsfZ
Size: 113KB - Virtual size: 156KB

.T
Size: 1024B - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 3KB