4e73f8bfd416a2761821bd24dd11bfe8

General

Target

4e73f8bfd416a2761821bd24dd11bfe8
Size

30KB
MD5

4e73f8bfd416a2761821bd24dd11bfe8
SHA1

41a15837d34d531548388bb6cbcc688e59fada02
SHA256

4fa84e5ce234ca1f94d0f1d5846b29cc0b328edd217d9077f1f10d4f7a23eab6
SHA512

fc5f6f9f7445256c4bd895ad3e207eb742313472e7e10956fa58a7533ba44d1c846704536350ffff984dee12391ed86a62cc31fde038d07c881c3b6e1b7c7c5b
SSDEEP

384:9EvkNStx+EnMylu26ScUhAkeVW2bOPn9pvqC+gGZseB:9EkQxX76ScUhAFVWWOPTSC+RZBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e73f8bfd416a2761821bd24dd11bfe8

Files

4e73f8bfd416a2761821bd24dd11bfe8
.dll windows:4 windows x86 arch:x86

3a19aafa9544b60091b73f1de4727aa7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
FreeResource
SetFileTime
GetFileTime
SetFileAttributesA
SizeofResource
LockResource
LoadResource
FindResourceA
GetCurrentProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
GetFileSize
GetProcAddress
HeapAlloc
GetProcessHeap
VirtualProtect
CreateMutexA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
LoadLibraryA
WideCharToMultiByte
GetSystemDirectoryA
OpenMutexA
WinExec
GetTempFileNameA
GetPrivateProfileStringA
MoveFileA
GetTempPathA
GetFileAttributesA
CreateFileA
GetTickCount
WriteFile
CloseHandle
ReadFile
SetFilePointer
DeleteFileA
GetModuleFileNameA
CreateThread

user32

wvsprintfA
MessageBoxA
wsprintfA
FindWindowA
GetWindowThreadProcessId

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

msvcrt

??3@YAXPAX@Z
_strcmpi
_stricmp
_adjust_fdiv
_initterm
malloc
strncpy
free
sprintf
atoi
strrchr
??2@YAPAXI@Z
strstr
_except_handler3

ws2_32

closesocket

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a19aafa9544b60091b73f1de4727aa7

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 7KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 7KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 2KB