58d15e00295e0861df97a96adcc7933f

General

Target

58d15e00295e0861df97a96adcc7933f
Size

50KB
MD5

58d15e00295e0861df97a96adcc7933f
SHA1

3d796898230f7e409fe4b8ebd9f2b156b2e24a65
SHA256

d71d66350e87a287408050a53ae37427b2e320b75f7c6e27b87cec31a5f85924
SHA512

7c4fbe74896b4fbcdd1ca63d64125fc385518fe7e141e5a900baa97570ce7d7ff297dd674676f52f93fe676ee4b6ed63b1f6489ce8ef959403b344b8541a7bfc
SSDEEP

768:UYzxqQIjUIUWYel7+8+yeXO6Woo/tpdGQ4Ud1JP/dyhkP8WILjFE:UY+UIyUiCe+6WJtpdGHGnNa5WILa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d15e00295e0861df97a96adcc7933f

Files

58d15e00295e0861df97a96adcc7933f
.exe windows:5 windows x86 arch:x86

8812be7a2994e1785d346f1f81a85cd6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExW
GetCurrentThreadId
GetCurrentProcessId
GetConsoleNlsMode
FatalExit
WideCharToMultiByte
GetUserDefaultLCID
ExitProcess
GlobalAddAtomW
DeleteTimerQueue
EnterCriticalSection
GetTempPathW
ExitThread
AllocConsole
Sleep
GetModuleHandleW
CreateMemoryResourceNotification
GlobalAlloc
LeaveCriticalSection
OpenConsoleW
OpenEventW
GetFileSize
CreateFileW
CreateMutexW
TerminateProcess
ClearCommBreak
FindAtomW
CancelIo
BeginUpdateResourceW
SetUnhandledExceptionFilter
DeleteCriticalSection
CopyFileA
PurgeComm
VirtualAlloc

msvcrt

_chdir
_access
_cgetws
_atoldbl
_beep
_cabs
_atoi64
_chgsign
_assert

ws2_32

bind
socket
WSALookupServiceNextW
WSACleanup
listen
closesocket
WSAStartup

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8812be7a2994e1785d346f1f81a85cd6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.bss Size: 512B - Virtual size: 256B

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 3KB - Virtual size: 3KB

.data
Size: - Virtual size: 522KB

.bss
Size: 512B - Virtual size: 256B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 3KB - Virtual size: 3KB