OpenNet[.]Red32n

Sharing

Copy URL

Twitter E-mail

General

Target

OpenNet.Red32n
Size

1.5MB
MD5

50c1e25486b4d1e1f8002c0793f43367
SHA1

730253d2886f8acafd7f67899796ad3a783d592c
SHA256

1c67c1b51acb95326662f192efce7c15ed4a0f2b779c1f33443d048bae1b09c2
SHA512

6d6ffaf1bbf5c802f7471466e909e2ef1486a511905ab82874815d54bd8989c992d5817f908a6a6b025ba3b975981a7bb86560fd246a39146438d5deebd42b5d
SSDEEP

49152:jQ3/jKwYQaJke0Q+Gu8i+oLgs1mPm7QsRV8PBOELIT7zBZozN4:jqhat5luB+oXEPysBc3jo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OpenNet.Red32n

Files

OpenNet.Red32n
.dll windows:6 windows x86 arch:x86

104181d5ff93d66e5774dc385882b26b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExW
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MessageBoxA

ws2_32

socket

dbghelp

MiniDumpWriteDump

wininet

InternetCloseHandle

shlwapi

ord1

Exports

Exports

AuthorInfo
DependencyCount
ExtendedInfo
GetDependency
OfficialMod
PostInit
PreInit
SendMessageB
Uninit

Sections

.text
Size: - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug_o
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

104181d5ff93d66e5774dc385882b26b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

dbghelp

wininet

shlwapi

Exports

Exports

Sections

.text Size: - Virtual size: 699KB

.text1 Size: - Virtual size: 8KB

.rdata Size: - Virtual size: 158KB

.data Size: - Virtual size: 120KB

.data1 Size: - Virtual size: 33KB

.debug_o Size: - Virtual size: 75KB

.trace Size: - Virtual size: 1KB

_RDATA Size: - Virtual size: 1KB

.vmp0 Size: - Virtual size: 1.1MB

.vmp1 Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 512B - Virtual size: 204B

.text
Size: - Virtual size: 699KB

.text1
Size: - Virtual size: 8KB

.rdata
Size: - Virtual size: 158KB

.data
Size: - Virtual size: 120KB

.data1
Size: - Virtual size: 33KB

.debug_o
Size: - Virtual size: 75KB

.trace
Size: - Virtual size: 1KB

_RDATA
Size: - Virtual size: 1KB

.vmp0
Size: - Virtual size: 1.1MB

.vmp1
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 512B - Virtual size: 204B