2a9a4aa0b9806c1a4f78c4c538e7a60a

General

Target

2a9a4aa0b9806c1a4f78c4c538e7a60a
Size

9KB
MD5

2a9a4aa0b9806c1a4f78c4c538e7a60a
SHA1

664619813ed758656927b91bacd4f235669822bb
SHA256

97a3e1e0df8f97e9c7378261dd9f58110159a667d797e5e899708af285ee9a96
SHA512

6319b57b2b08170ddac8459c4addb95f9c235a28a93981bb52b13db0ad1819a6e3e1f9e5cb3676b5129fb71634f3e4a1264ca720d135b3e2ee6cfc5ae4de81a9
SSDEEP

192:R8+JN5a2UIuBcemqfjumvwJjOR5fOPljKM3:R8022Am0vvIjp4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a9a4aa0b9806c1a4f78c4c538e7a60a

Files

2a9a4aa0b9806c1a4f78c4c538e7a60a
.dll windows:6 windows x86 arch:x86

6282f0a9f7e39e35db26902c7a0c59a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
lstrlenW
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetThreadPriority
GetCurrentThread
ExitThread
CreateThread
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

ws2_32

htons
send
socket
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
closesocket
gethostbyname

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6282f0a9f7e39e35db26902c7a0c59a2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 400B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 400B