64039c719c4448d82f6877ce742895ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64039c719c4448d82f6877ce742895ba
Size

32KB
MD5

64039c719c4448d82f6877ce742895ba
SHA1

3ec1a038ed9be5f703597cbf85451bac82675456
SHA256

01d036dec7a5f7c06f51846761418f74e6a1162abe85afd710edf7ca0a20eda9
SHA512

a11dfba7c796d3e2efb410660ca9129ac10f80794756523fd971d6a3ae5b5f8d4c89f9641d0aa5afa4d5ed07eac8ccc0bfbbfc061e7f1f36d398f2f92853f2ca
SSDEEP

384:Uo+wuDcZ/OFzX1t7xsZVyU4DVesmBpErB9Yy3mpYMH:b+wYq/q1tN20VesmBaN9eBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64039c719c4448d82f6877ce742895ba

Files

64039c719c4448d82f6877ce742895ba
.dll windows:4 windows x86 arch:x86

ee3e1f15cc58761980600f2cf63d3326

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2915
ord6648
ord2764
ord4129
ord537
ord926
ord924
ord922
ord535
ord858
ord6663
ord860
ord1168
ord4278
ord2818
ord939
ord6877
ord800
ord540

msvcrt

_adjust_fdiv
_initterm
free
_onexit
__dllonexit
rand
atoi
malloc
exit
__CxxFrameHandler
time
srand

kernel32

GetCurrentProcessId
CreateThread
ExitThread
Sleep
TerminateThread
CloseHandle
HeapAlloc
GlobalMemoryStatus
lstrcpyA
GetVersionExA
GetComputerNameA
GetProcessHeap
GetTickCount

user32

wsprintfA

advapi32

RegCloseKey
OpenSCManagerA
RegQueryValueExA
RegOpenKeyExA
DeleteService
OpenServiceA

ws2_32

gethostbyname
closesocket
connect
htons
inet_addr
socket
sendto
inet_ntoa
setsockopt
WSASocketA
WSAStartup
htonl
send
WSAGetLastError
recv

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ