5116e82f99b0e37bba9d6f3a07a4d6f2

General

Target

5116e82f99b0e37bba9d6f3a07a4d6f2
Size

12KB
MD5

5116e82f99b0e37bba9d6f3a07a4d6f2
SHA1

9215b126f41a0d80406e77778ed2def678fe9f7d
SHA256

e8b81968eb50e2ee4d1a07205870a4836d4fb36a2b09385b1ac8714fca685ea4
SHA512

9d40f8253b2b18825a1e613c4b3889e1c235bdd244d0b8aae62b3dabab156dee4ef4e43d44c2822dd71264e4b847f1881afd0dcc8a8c79a1a33b172351a811f6
SSDEEP

192:VtW/ArdtxorcyZLW/9ZvwoRapdLf73ITTNcRXkf/kfsy9cP1oyn7qnWaJMK2uL7C:VDzx8cyZQjYwy9i1dqnWW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5116e82f99b0e37bba9d6f3a07a4d6f2

Files

5116e82f99b0e37bba9d6f3a07a4d6f2
.exe windows:4 windows x86 arch:x86

06884c92c3b1039f5e2793f3ee0ef401

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
socket
inet_addr
gethostbyname
closesocket
recv
WSACleanup
select
send
htons
WSAStartup

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

advapi32

RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
fopen
fprintf
fclose
srand
strstr
strtok
sprintf
rand
atoi
strchr
strncmp
memmove
strncpy
_snprintf
malloc

kernel32

GetModuleHandleA
GetWindowsDirectoryA
lstrcmpiA
GetFileAttributesA
CreateProcessA
lstrcatA
CreateDirectoryA
SetFileAttributesA
CreateFileA
WriteFile
ExpandEnvironmentStringsA
WinExec
GetVersionExA
GetLocaleInfoA
GetStartupInfoA
GetLogicalDriveStringsA
lstrlenA
CopyFileA
CloseHandle
TerminateThread
ExitThread
GetTickCount
GetTempPathA
SetErrorMode
Sleep
CreateMutexA
WaitForSingleObject
GetLastError
ExitProcess
GetModuleFileNameA
GetDriveTypeA
CreateThread

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

06884c92c3b1039f5e2793f3ee0ef401

Headers

File Characteristics

Imports

ws2_32

urlmon

shell32

advapi32

user32

msvcrt

kernel32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 5KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 5KB