407e0d5b7e70472092094e95b90de101

Sharing

Copy URL Twitter E-mail

General

Target

407e0d5b7e70472092094e95b90de101
Size

376KB
MD5

407e0d5b7e70472092094e95b90de101
SHA1

5103c98681cf27650377c709b64170a6d9709cb2
SHA256

31ca850a9c1c5bb497a65aa0b9f01f405c61b19074dbaa0cb121511974faff13
SHA512

ac9acb0c236795083b0174883aec7e2484ab927bdabd0654482bc3fc1e8ce6eeb16f99e5529612b39d06845505aa8cc178f597ac7ef4040f9908014135f72d62
SSDEEP

6144:bbNb8KfmvjkQTEq2tEKTE6Fia6OnkFKAQUSmKrze0TQJF7XXN:bB8TvjTKC76FiajE7S7HxsJFD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
407e0d5b7e70472092094e95b90de101

Files

407e0d5b7e70472092094e95b90de101
.exe windows:4 windows x86 arch:x86

7c4a081386308e00b13eb952a21e0996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetComputerNameA
ResetEvent
CreateMutexA
ResumeThread
SuspendThread
GetLastError
PulseEvent
CreateEventA
LeaveCriticalSection
SetEvent
EnterCriticalSection
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
OpenEventA
Sleep
WaitForSingleObject
GlobalFree
LocalFree
GetLocalTime
HeapReAlloc
SetEndOfFile
GetVersion
CreateFileA
ReadFile
WriteFile
GetPrivateProfileStringA
GetPrivateProfileIntA
DeviceIoControl
GetTickCount
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetFileSize
GetTempPathA
UnmapViewOfFile
FlushViewOfFile
DeleteFileA
ReleaseMutex
lstrlenA
GetVersionExA
MultiByteToWideChar
lstrcmpA
LocalAlloc
WideCharToMultiByte
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
RtlUnwind
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
SetEnvironmentVariableA
GetCommandLineA
GetCurrentProcessId
GetLocaleInfoW
GetLocaleInfoA
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW

advapi32

InitializeSecurityDescriptor
RegOpenKeyA
SetSecurityDescriptorDacl
RegQueryValueExA
StartServiceCtrlDispatcherA
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CreateServiceA
DeleteService
RegOpenKeyExA
RegSetValueExA
CloseServiceHandle
RegCloseKey
StartServiceA
RegCreateKeyExA
GetUserNameA
SetServiceStatus
ReportEventA
DeregisterEventSource
RegisterServiceCtrlHandlerA
RegisterEventSourceA

wsock32

htons
bind
closesocket
select
__WSAFDIsSet
recvfrom
sendto
getsockname

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c4a081386308e00b13eb952a21e0996

Headers

File Characteristics

Imports

kernel32

advapi32

wsock32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 240KB - Virtual size: 291KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 240KB - Virtual size: 291KB

.rsrc
Size: 4KB - Virtual size: 1KB