42f88e8aade95bc19e5027cd602415f4

General

Target

42f88e8aade95bc19e5027cd602415f4
Size

19KB
MD5

42f88e8aade95bc19e5027cd602415f4
SHA1

4a06482e6e80183eae2c1f3926b908d869c9f507
SHA256

d5ee75bcddc90021b0c604001f1a13382ba5e8dd16178e6cc1f87a04780e9b1f
SHA512

71b079e358eac06d0aff48cb476bdc3125a963fc8e59d91e14af7d47ca1b4432b9dce2ee5fe7c776d8f4547cc75f49b8a014b9a68f9d2bf7f9bc016e9e9b9eba
SSDEEP

192:OJEoZrcx7szuC0MRpQ1toCCp98dXgi4dI8DLo7soWM0TFF00LzlAmMlPVOSXJce7:DC0qpxItgzNlZF6+v3NslIP+nfkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f88e8aade95bc19e5027cd602415f4

Files

42f88e8aade95bc19e5027cd602415f4
.dll windows:4 windows x86 arch:x86

6c6b5cdbe6a04d108d36fd422059cb76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CreateMutexA
TerminateProcess
GetCurrentProcess
GetFileSize
HeapAlloc
GetProcessHeap
GetLastError
Process32Next
Process32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetSystemDirectoryA
GetCurrentProcessId
LoadLibraryA
VirtualProtect
WinExec
FreeLibrary
OpenMutexA
GetPrivateProfileStringA
GetFileAttributesA
CreateFileA
CloseHandle
ReadFile
SetFilePointer
DeleteFileA
GetModuleFileNameA
CreateThread

user32

CallNextHookEx
SetWindowsHookExA
wsprintfA
UnhookWindowsHookEx
wvsprintfA

advapi32

RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle

msvcrt

_strcmpi
_adjust_fdiv
_initterm
strrchr
free
malloc
strstr
_except_handler3
sprintf
strncpy

ws2_32

closesocket
WSAGetLastError

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c6b5cdbe6a04d108d36fd422059cb76

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcrt

ws2_32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 2KB