3af38f96369a3c3524344ed61360b2f6

General

Target

3af38f96369a3c3524344ed61360b2f6
Size

17KB
MD5

3af38f96369a3c3524344ed61360b2f6
SHA1

fcbe3d7d551a54768f2d4654379596cab9c45617
SHA256

fe59807631a923a3c5865b4fb65edb14a2d9f167080e088f17fd9a79990c166a
SHA512

a868dd6c32302d843d4dbe4d263d50a206f74368ff877794effe91b40d4af48cc5ea5d952c9bc70e86adc1702cee2b2aa11e6a3ef3d69bddfd24058968d1b9da
SSDEEP

384:ELxcyV8z86k5GZQHvOhVNpAqJxxENxYnVYnZ2uEZc:6xcP8r57HvODXAqJQoVYnIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af38f96369a3c3524344ed61360b2f6

Files

3af38f96369a3c3524344ed61360b2f6
.exe windows:4 windows x86 arch:x86

e5a8428772f81636c87d9201ec8fdc15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send
closesocket
WSACleanup
WSAStartup
ntohs
ioctlsocket
WSAGetLastError
gethostbyname
socket
htons
connect

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

user32

MessageBoxA
wsprintfA

ole32

CoUninitialize
CoCreateGuid
CoInitialize

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

lstrcmpiA
GetSystemTimeAsFileTime
GetModuleFileNameA
SetFilePointer
CopyFileA
Sleep
CreateFileA
GetCommandLineA
ExitProcess
GetStartupInfoA
CreateThread
GetLastError
lstrcatA
GetFileAttributesA
HeapFree
lstrlenA
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
ReadFile
WriteFile
CloseHandle
GetModuleHandleA
WaitForSingleObject
GetExitCodeProcess
GetTempPathA
lstrcmpA
CreateDirectoryA
lstrcpyA
CreateProcessA
HeapAlloc
GetProcessHeap
lstrcpynA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5a8428772f81636c87d9201ec8fdc15

Headers

File Characteristics

Imports

wsock32

advapi32

user32

ole32

wininet

version

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 66KB

.rsrc Size: 1024B - Virtual size: 680B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 66KB

.rsrc
Size: 1024B - Virtual size: 680B