4c6a145c95b73f75918ec79fafbe1102

General

Target

4c6a145c95b73f75918ec79fafbe1102
Size

35KB
MD5

4c6a145c95b73f75918ec79fafbe1102
SHA1

69b22949f5c6582c76382a597d2eeb816bc23017
SHA256

a1ef5f6e9d6ee7c00f41cb1293816e458bdd43195baf9d310051120b28c5e72d
SHA512

b6005672ecf34a0748fcb682769f97ec538993d73de6ef41605146813cf74d7a8d040ef1532720fe5535fb23bed8104d12057d9f6513f441bc0c1d537719dac5
SSDEEP

768:sTBASaRVq04jYuC09B7vnHe6wZJ8uaU+Q0gi851ioCePaA:sTady8uCCd+JWQ0gioMeCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6a145c95b73f75918ec79fafbe1102

Files

4c6a145c95b73f75918ec79fafbe1102
.dll windows:4 windows x86 arch:x86

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

user32

SetWindowLongA
GetWindowLongA
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
GetParent
CallWindowProcA
EnumChildWindows
SetWindowTextA
wsprintfA

ws2_32

send
connect
socket
htons
inet_addr
closesocket
inet_ntoa
recv
select

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
free
_initterm
malloc
_adjust_fdiv
isalnum
memcpy
memset
memcmp
sscanf

kernel32

GetCommandLineA
GetExitCodeThread
TerminateThread
GetCurrentDirectoryA
GetCurrentProcessId
IsBadReadPtr
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
lstrcpyA
lstrcatA
lstrcmpA
lstrcmpiA
GetModuleFileNameA
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
GetLastError
SetLastError
lstrlenA
GetProcAddress
CreateThread
CloseHandle
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

Imports

wininet

user32

ws2_32

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 19KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 19KB

.reloc
Size: 3KB - Virtual size: 3KB