4894e6e97daded00b318793818991352

Sharing

Copy URL

Twitter E-mail

General

Target

4894e6e97daded00b318793818991352
Size

23KB
MD5

4894e6e97daded00b318793818991352
SHA1

498e99f29f13d278b95c2e55571b40a34b313e7d
SHA256

899abaf96087ca5f427817b2f9bf3cd6a0b07ee31cda633c4b3f3a1837086f76
SHA512

13431ad77cc1cb52e3a2e4c75a4b344b47ebebe81eca9333c1bde4b797802e713b307b93bfdf6325e36354a20f05929e223bd66788442b4609407466a9c513f4
SSDEEP

384:6yaC3SIFeWMX4grNoFt09pjjNoXJMqzewN2t6Ul8Cv3h+f3:6y6IgxpjjimOea2t6Ijo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4894e6e97daded00b318793818991352

Files

4894e6e97daded00b318793818991352
.dll windows:4 windows x86 arch:x86

21ab351db0e26cc6c661005d598dc615

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
LocalFree
OpenProcess
Process32First
Process32Next
ReadFile
ReleaseMutex
GetProcAddress
TerminateProcess
TerminateThread
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
GetCurrentThreadId
CreateToolhelp32Snapshot
CreateThread
CreateMutexA
CreateFileA
Sleep
CloseHandle

user32

wsprintfA

wsock32

socket
send
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSACleanup
select
recv
listen
inet_addr
gethostname
gethostbyname
connect

ole32

CoInitialize
CreateStreamOnHGlobal

shlwapi

StrRChrA
StrDupA
StrToIntA
StrStrIA
StrTrimA

wininet

InternetOpenUrlA
InternetOpenA
DeleteUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
InternetCloseHandle
InternetCrackUrlA
InternetGetConnectedState

advapi32

RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

msvcrt

strtok

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21ab351db0e26cc6c661005d598dc615

Headers

File Characteristics

Imports

kernel32

user32

wsock32

ole32

shlwapi

wininet

advapi32

urlmon

shell32

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 692B