4c96423a6e44e6f54ccf651c6ef580e7

General

Target

4c96423a6e44e6f54ccf651c6ef580e7
Size

37KB
MD5

4c96423a6e44e6f54ccf651c6ef580e7
SHA1

2e02599f9ee74288c8913e34b90795c61892f03e
SHA256

94c7d604a3f9b2a43bb4297971296ac4e01aa813197c8a85a3448b17f11c9fbd
SHA512

ed8ce8a3945757963913ad28ceb8d373fa3540b3be95814d8a272fc2f597f831609cd8b12730b8244868441ad4b0cc2707900efb6c006c32dac15f6c6370d130
SSDEEP

768:46idYOTKexFDOaceII2xN0rVfX71K8uaUelrYpkrFO15o8e:y5rFDO/eIspfrPhYpKKK8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c96423a6e44e6f54ccf651c6ef580e7

Files

4c96423a6e44e6f54ccf651c6ef580e7
.dll windows:4 windows x86 arch:x86

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

user32

SetWindowLongA
GetWindowLongA
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
GetParent
CallWindowProcA
EnumChildWindows
SetWindowTextA
wsprintfA

ws2_32

send
connect
socket
htons
inet_addr
closesocket
inet_ntoa
recv
select

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
free
_initterm
malloc
_adjust_fdiv
isalnum
memcpy
memset
memcmp
sscanf

kernel32

GetCommandLineA
GetExitCodeThread
TerminateThread
GetCurrentDirectoryA
GetCurrentProcessId
IsBadReadPtr
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
lstrcpyA
lstrcatA
lstrcmpA
lstrcmpiA
GetModuleFileNameA
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
GetLastError
SetLastError
lstrlenA
GetProcAddress
CreateThread
CloseHandle
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

Imports

wininet

user32

ws2_32

msvcrt

kernel32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB