4f93a37bd02142a50648c16c6d3678ea

General

Target

4f93a37bd02142a50648c16c6d3678ea
Size

36KB
MD5

4f93a37bd02142a50648c16c6d3678ea
SHA1

9f8de1ada023ff832187433b9f5fca11cc8759ba
SHA256

620c28e16c94ce13cfe66d7fa5025f655dc5fadbf9c2b85b7826a085d1a68a2f
SHA512

a0c09f3a8336ac251336c36d0099d22ea7de2f65c1d46b896ca11e965b9a44e3b4ed6532e2adc3f5f801f188d6e5aa21abe3646c410ba465972c0296604ef9f7
SSDEEP

384:i7/EKI4YuT023pioekSuS7YvYucDZnmZRuOUyEzZhX3kaPqJ5d:iQsYunIdzBWmFmhUyEzZhX3bqJ5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f93a37bd02142a50648c16c6d3678ea

Files

4f93a37bd02142a50648c16c6d3678ea
.dll regsvr32 windows:4 windows x86 arch:x86

4a2502691b3b98ff11e2881b6959f72d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv

kernel32

LocalFree
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
Sleep
GetTickCount
InterlockedDecrement
CloseHandle
CreateThread
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA

user32

PeekMessageA
CallNextHookEx

ole32

CoCreateInstance
OleRun

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo

msvcrt

??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2502691b3b98ff11e2881b6959f72d

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

ole32

oleaut32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 116KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 116KB

.reloc
Size: 4KB - Virtual size: 2KB