551c6e1cb29ab49f4d4e91da12344128

General

Target

551c6e1cb29ab49f4d4e91da12344128
Size

84KB
MD5

551c6e1cb29ab49f4d4e91da12344128
SHA1

c01e3c57f2f2a291ef63a93ccd5fc091bbaef7f6
SHA256

d2fed6060ec16b0bc8f56a5d49a1c747d5a3e7b38297624128c99b20319ec4af
SHA512

a3e363114481e32856bf56337e8349b6e2ea8ea74c03235cc4c5fca491d0c1097d99568cb16ab86a3d84e7cac8bacb57d76fb6fbbaeed33c45b0b3a61a7b434d
SSDEEP

1536:b0YC4Tf1oef0HVt2551TTWmu+zEpZeiawnoDNeaR:b24Boef0mJiaEoDRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
551c6e1cb29ab49f4d4e91da12344128

Files

551c6e1cb29ab49f4d4e91da12344128
.exe windows:4 windows x86 arch:x86

5c266e4d6a44f63749cef3606fd59d0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetStartupInfoA
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
ReadFile
PeekNamedPipe
CreatePipe
GetModuleHandleA
GetProcAddress
FormatMessageA
CloseHandle
GetLastError
lstrlenA
LocalFree
CreateEventA
GetModuleFileNameA
SetEvent
GetSystemDirectoryA
WriteFile
LCMapStringW
FreeEnvironmentStringsW
WideCharToMultiByte
FlushFileBuffers
LoadLibraryA
SetStdHandle
HeapReAlloc
VirtualAlloc
LCMapStringA
Sleep
GetEnvironmentStrings
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
MultiByteToWideChar
GetStringTypeW
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetStringTypeA
HeapFree
HeapAlloc
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree

advapi32

SetServiceStatus
StartServiceCtrlDispatcherA
DeleteService
OpenServiceA
QueryServiceStatus
ChangeServiceConfigA
ControlService
QueryServiceConfigA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
RegisterServiceCtrlHandlerA
StartServiceA

ws2_32

select
WSAStartup
socket
setsockopt
bind
send
accept
recv
inet_addr
connect
htons
listen
closesocket

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5c266e4d6a44f63749cef3606fd59d0b

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 8KB