2926292825378cc7748362707f2b44a2

General

Target

2926292825378cc7748362707f2b44a2
Size

28KB
MD5

2926292825378cc7748362707f2b44a2
SHA1

5fbd40526554b241398938b7676ed93283cf931e
SHA256

14f8564d260d804afd443625f373182070e2a07908f90b4e1a4acf6e9ea09587
SHA512

19265144a68fe061695ca762cb2f06dba8674d45bf616227c01563d5e9a421bf2942144a83997e2de467eb07ca99b58f35fa42dd6f4e4b5c65521713e97db658
SSDEEP

384:xPbcoXnTKfVsh8LlX+odzEEKLwDxiGhXoNdAA:Jbr3T6GhAhdzEEKLwrhXozA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2926292825378cc7748362707f2b44a2

Files

2926292825378cc7748362707f2b44a2
.dll windows:4 windows x86 arch:x86

9ed22b00816a8ef2f83a98c2bd133ce0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAllocEx
OpenProcess
GetProcAddress
LoadLibraryA
VirtualFree
VirtualQueryEx
GetSystemInfo
VirtualAlloc
ReadProcessMemory
CloseHandle
WriteProcessMemory
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetCurrentProcess
CreateRemoteThread
GetLastError
SetLastError
VirtualQuery
VirtualProtect
OutputDebugStringA
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateThread

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

ws2_32

getpeername
ntohs
getsockname
inet_ntoa
WSASetLastError
WSAStartup
inet_addr
gethostbyname
closesocket
send
socket
WSAGetLastError
htons
connect
WSASend

wininet

InternetOpenUrlA
InternetOpenA

msvcrt

_strcmpi
malloc
free
_strupr
_adjust_fdiv
_initterm
_onexit
__dllonexit
_splitpath
_mbsnbcpy
atoi
_mbschr
??2@YAPAXI@Z
strchr
strstr
strncpy
sprintf
__CxxFrameHandler
??3@YAXPAX@Z

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ed22b00816a8ef2f83a98c2bd133ce0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

msvcrt

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 912B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 912B