65758fbd9bfdeb9dd6f9bbadb57208b1

Sharing

Copy URL

Twitter E-mail

General

Target

65758fbd9bfdeb9dd6f9bbadb57208b1
Size

448KB
MD5

65758fbd9bfdeb9dd6f9bbadb57208b1
SHA1

5e3ad27d7197ee59274c5ea5fbf5b6afd75dfa10
SHA256

0d4a6b575ddfc1ac24882987943e79bb70032e5f4faeae03f55d0d2b0a50d9c1
SHA512

ee81c03b2767c45b012f6d3ef0299a4f41bb06c41de45c2e0a6fa52ef48d432aa30ae0eac50ce8151931349d8f6d9f9fce4f07b3170f1e9c744d15f706d837d1
SSDEEP

6144:a3bAuBQgmtgAe+XnFPXw9yL6kQWvZRF6Ig1CsfcQOz0mfx7qnr:W/VmtgAe+XBouFQWrF6IgE5LZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65758fbd9bfdeb9dd6f9bbadb57208b1

Files

65758fbd9bfdeb9dd6f9bbadb57208b1
.exe windows:4 windows x86 arch:x86

b664c21663d293010f4aceb688b9d980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
__WSAFDIsSet
select
WSACleanup
inet_addr
gethostbyname
getsockname
WSAStartup
htons
WSAAsyncSelect
bind
setsockopt
listen
accept
closesocket
socket
WSAGetLastError
connect
send

kernel32

CreateFileA
GetTimeZoneInformation
lstrlenA
RaiseException
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
GetStdHandle
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryA
ExitThread
CreateThread
Sleep
ExitProcess
CloseHandle
CreateProcessA
OpenProcess
GetCurrentProcessId
CopyFileA
SetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
WaitForSingleObject
CreateMutexA
CompareStringA
CompareStringW
AllocConsole
HeapValidate
LCMapStringW
LCMapStringA
SetFilePointer
GetConsoleMode
GetConsoleCP
FlushFileBuffers
InterlockedExchange
GetSystemTimeAsFileTime
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
GetLastError
GetFileType
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
FatalAppExitA
SetEnvironmentVariableA
IsBadReadPtr
DebugBreak
InterlockedDecrement
WriteFile
OutputDebugStringA
InterlockedIncrement
WriteConsoleW
OutputDebugStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
LoadLibraryW
SetHandleCount
SetLastError
InitializeCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetCurrentThread
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
RtlUnwind

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

ole32

CoInitializeEx
CoCreateInstance

oleaut32

SysStringLen
SysAllocString
SysFreeString

Sections

.text
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b664c21663d293010f4aceb688b9d980

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

ole32

oleaut32

Sections

.text Size: 356KB - Virtual size: 353KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 8KB - Virtual size: 13KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 356KB - Virtual size: 353KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 8KB - Virtual size: 13KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 3KB