5a93e050b67ee00cea83740757a9c206

General

Target

5a93e050b67ee00cea83740757a9c206
Size

72KB
MD5

5a93e050b67ee00cea83740757a9c206
SHA1

947fbfc74bbd9171a91cbf15b86538a6e2dc3929
SHA256

c9a33228507c5a166ea21fe7e2c6733919a91a91ee6422936b77a1b546c73195
SHA512

41bce9ae71fcadbd9cc605f094493c0033195c6b4ab5194f9cc711fd3af20f22525d3f3d52d83fb557fd75de6e131cc2708f09df87c581af0f6e809b7ad76307
SSDEEP

768:wnuWtZiIr8SBPJm/Ktp+Z/QqmDU4kklnB+ZODifXDtnB:wnuWtZDrZBPgF/Q7tk15ztnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a93e050b67ee00cea83740757a9c206

Files

5a93e050b67ee00cea83740757a9c206
.exe windows:4 windows x86 arch:x86

d1e04cc0710603452c46638629af26ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
socket
bind
closesocket
getsockname
gethostbyname
htons
connect
send
recv

kernel32

GetLocaleInfoA
CopyFileA
GetModuleFileNameA
GetModuleHandleA
Sleep
GetLastError
CreateMutexA
HeapSize
GetSystemDirectoryA
TlsAlloc
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
RtlUnwind
GetProcAddress
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
InitializeCriticalSection
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1e04cc0710603452c46638629af26ec

Headers

File Characteristics

Imports

wsock32

kernel32

advapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 43KB

.rsrc Size: 4KB - Virtual size: 176B

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 43KB

.rsrc
Size: 4KB - Virtual size: 176B