4267fa550c1bc7e77550746ea77135d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4267fa550c1bc7e77550746ea77135d8
Size

24KB
MD5

4267fa550c1bc7e77550746ea77135d8
SHA1

a834cfe199eb0f514128a31969d8f96e13dd6922
SHA256

495201394612192ef729500cc143fd3782d39a8e45dce3a03e30379c2ea2b8c0
SHA512

ca476b75544c655afc5608a0b5b97045d55dc0db5b06420835c965d3332711062c80543a5b2d40ade80da1d83cdd20069e5674713f773dfee37ff44cadb2ceaa
SSDEEP

96:VVBLV5bVGfPf9XpFvx4HLgueIjYHFt5CZRvsQnQ6PRQ0bPJJmnQT+ZSrZbZBBUaQ:rWXlPnHFbuBBQ6PRQkBJYQiWNZbuUfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4267fa550c1bc7e77550746ea77135d8

Files

4267fa550c1bc7e77550746ea77135d8
.dll windows:4 windows x86 arch:x86

dfe57006382338d60118724c3edab89d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
ExitProcess
Sleep
lstrcatA
VirtualProtect
CloseHandle
CreateThread
GetModuleFileNameA

user32

SetWindowsHookExA
KillTimer
SetTimer
wsprintfA
CallNextHookEx
UnhookWindowsHookEx

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

ws2_32

gethostname

msvcrt

_adjust_fdiv
malloc
_initterm
free
strlen
strstr
strrchr
exit

ntdll

_strlwr
_itoa

Exports

Exports

ServiceRouteEx
StartServiceEx
StopServiceEx

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1021B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ