65a44d55470a46563e09dc31458c7ece

Sharing

Copy URL

Twitter E-mail

General

Target

65a44d55470a46563e09dc31458c7ece
Size

232KB
MD5

65a44d55470a46563e09dc31458c7ece
SHA1

18113bd8e95da61f363507e60a2d8ae76dce617a
SHA256

e93a131cb5537a1463a2b618207ead1cd4500330936dd295080b804b274a9fb1
SHA512

2fb2957b1b0ecccfedb8ce537802af7ff947df56b8c0905948389aff9249a77e2a3202cc360e3848eccc14f4b58287c70d5e64736c05b5007aabf238d9a68c5a
SSDEEP

6144:Pr8MZSC3s9b0gdl7RTk8WhBFfGuL/HiTx:wy/Gb99a8IFfRL/Hkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65a44d55470a46563e09dc31458c7ece

Files

65a44d55470a46563e09dc31458c7ece
.dll windows:4 windows x86 arch:x86

3eb11bf9865a107604dc20736df38113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord5204

msvcrt

strncpy

kernel32

VirtualQueryEx
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetDesktopWindow

advapi32

QueryServiceStatus

ws2_32

inet_addr

shlwapi

StrStrIA

ole32

CoSetProxyBlanket

oleaut32

SysAllocStringByteLen

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

netapi32

Netbios

Exports

Exports

Getlua

Sections

.text
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yu0
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yu1
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3eb11bf9865a107604dc20736df38113

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

shlwapi

ole32

oleaut32

msvcp60

netapi32

Exports

Exports

Sections

.text Size: - Virtual size: 55KB

.rdata Size: - Virtual size: 14KB

.data Size: - Virtual size: 28KB

.yu0 Size: - Virtual size: 170KB

.yu1 Size: 220KB - Virtual size: 216KB

.reloc Size: 4KB - Virtual size: 280B

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: - Virtual size: 55KB

.rdata
Size: - Virtual size: 14KB

.data
Size: - Virtual size: 28KB

.yu0
Size: - Virtual size: 170KB

.yu1
Size: 220KB - Virtual size: 216KB

.reloc
Size: 4KB - Virtual size: 280B

.rsrc
Size: 4KB - Virtual size: 2KB