4bcc9112d3b11c803c775f4528254d67

Sharing

Copy URL

Twitter E-mail

General

Target

4bcc9112d3b11c803c775f4528254d67
Size

216KB
MD5

4bcc9112d3b11c803c775f4528254d67
SHA1

140bdca658f8ff83445bc485cbab3ca487ee8136
SHA256

01e946529b94c8c65a49808df5df4f9ddf2663b622b5530b68d1c7e59a824b45
SHA512

4aa4507436b46b74b5526a7845d08cbff2507e6df2acd6d941c3f0d493a8015e6bdcf39c14626219376966f930f67284be4833bd35fda39041d137f4de69897f
SSDEEP

6144:IHP4a78lV1NNzrmr+dVgfD5LMEjRS4d/HHJapS+j:IHP4a7M1DrajRl/HpaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bcc9112d3b11c803c775f4528254d67

Files

4bcc9112d3b11c803c775f4528254d67
.exe windows:4 windows x86 arch:x86

0a48669ca4c434e45890dfc72bae0ebc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_stricmp
_strdup
_itoa
_wcsicmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
isalpha
wcslen
islower
isupper
isalnum
_strrev
swprintf
wcsncpy
fread
putc
_ultoa
_endthreadex
_beginthreadex
sscanf
fgets
toupper
isdigit
strchr
free
_local_unwind2
_iob
strrchr
malloc
time
__CxxFrameHandler
_snprintf
strncmp
atoi
wcscmp
strstr
_ftol
rand
strncpy
strtok
printf
srand
exit
wcsstr
wcscat
sprintf
_except_handler3
fopen
vsprintf
fprintf
fclose
??3@YAXPAX@Z
??2@YAPAXI@Z

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

advapi32

GetSidSubAuthority
LookupAccountSidW
ControlService
QueryServiceStatus
StartServiceW
DeleteService
AllocateAndInitializeSid
FreeSid
OpenServiceA
GetUserNameA
EnumServicesStatusW
OpenSCManagerW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegisterServiceCtrlHandlerW
SetServiceStatus
OpenSCManagerA
CreateServiceA
ChangeServiceConfig2W
CloseServiceHandle
StartServiceCtrlDispatcherW
LsaOpenPolicy
LsaAddAccountRights
LsaRemoveAccountRights
LookupAccountNameW
GetUserNameW
LsaClose

mpr

WNetAddConnection2W
WNetCancelConnectionW

netapi32

NetApiBufferFree
NetUserEnum
NetUserGetInfo
NetShareAdd
NetServerDiskEnum

odbc32

ord75
ord31
ord24
ord141

shell32

ShellExecuteA

user32

wsprintfW
wsprintfA
wvsprintfA

wininet

InternetOpenW
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

ws2_32

WSACleanup
closesocket
recv
send
select
connect
ioctlsocket
socket
htons
inet_addr
__WSAFDIsSet
shutdown
gethostbyaddr
inet_ntoa
gethostbyname
getsockname
WSAStartup

kernel32

GetProcessHeap
HeapFree
IsBadWritePtr
VirtualQuery
GetModuleFileNameW
ExitProcess
GetLastError
FormatMessageW
LocalFree
SetUnhandledExceptionFilter
GetModuleHandleW
GetModuleFileNameA
GetCurrentProcessId
HeapReAlloc
lstrcmpiA
SetErrorMode
WaitForSingleObject
GetExitCodeProcess
ExitThread
PeekNamedPipe
ReadFile
DuplicateHandle
CreatePipe
SearchPathA
SetFileTime
GetFileTime
GetWindowsDirectoryA
CreateFileW
HeapAlloc
lstrlenW
MultiByteToWideChar
CloseHandle
Sleep
CopyFileW
DeleteFileW
SetCurrentDirectoryW
GetSystemDirectoryW
GetTempPathW
LoadLibraryW
GetTickCount
GetCurrentThreadId
GetProcAddress
LoadLibraryA
ReleaseMutex
CreateMutexW
GetCurrentProcess
SetPriorityClass
OpenProcess
DeleteFileA
TerminateThread
GetDiskFreeSpaceExW
TerminateProcess
Process32NextW
Process32FirstW
GetComputerNameA
CreateToolhelp32Snapshot
CreateThread
CreateProcessA
CreateFileA
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
GetSystemDirectoryA
GetVersionExW
WriteFile
GetWindowsDirectoryW
GetTempPathA
SetFilePointer
FormatMessageA
GetModuleHandleA
SystemTimeToFileTime
GetSystemTimeAsFileTime
SizeofResource
LockResource
GetStartupInfoA
CopyFileA
WideCharToMultiByte
MoveFileA
EnterCriticalSection
LeaveCriticalSection
SetEvent
CreateSemaphoreW
CreateEventW
ResetEvent
LoadResource
InitializeCriticalSection
SetConsoleCtrlHandler
FindResourceW

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 11.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a48669ca4c434e45890dfc72bae0ebc

Headers

File Characteristics

Imports

msvcrt

msvcp60

advapi32

mpr

netapi32

odbc32

shell32

user32

wininet

ws2_32

kernel32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 11.5MB

.rsrc Size: 96KB - Virtual size: 93KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 11.5MB

.rsrc
Size: 96KB - Virtual size: 93KB