70f06335f010ebc42bb663535b68f10d

Sharing

Copy URL

Twitter E-mail

General

Target

70f06335f010ebc42bb663535b68f10d
Size

28KB
MD5

70f06335f010ebc42bb663535b68f10d
SHA1

f6fa62930b6297c179ac6fddd7578c79276f3558
SHA256

7b98ec8994d4f82a0cd7091e97d3d64db5149ea16304461fd9320bf75d5e1c5a
SHA512

df70df79a7b65706e06d818a9b31761b72bde3250fca176a6a914b221009e995aad377d73e3eeaa8ce2739e59d03f634dd24086f66847bb8c587f0e62abbb80f
SSDEEP

192:ORKH3qhLSeJcsnWxRgbWiRAjPLCCqYUhBVlrYR3rxaxJhtO:tH3qheeJcsWxdiRAjPLC4rxaxJhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f06335f010ebc42bb663535b68f10d

Files

70f06335f010ebc42bb663535b68f10d
.dll windows:4 windows x86 arch:x86

43185f5133de83a81af2897aac960721

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

ole32

CoInitialize

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

kernel32

OutputDebugStringA
GetSystemDirectoryA
GetTempPathA
CopyFileA
Sleep
GlobalFindAtomA
OpenMutexA
GlobalAddAtomA
CreateMutexA
CreateThread
GetModuleFileNameA
GetCurrentProcess

urlmon

URLDownloadToFileA

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

fseek
_adjust_fdiv
_initterm
??2@YAPAXI@Z
sprintf
strcpy
strchr
free
malloc
memcpy
strcat
strrchr
strlen
memset
fclose
strcmp
ftell
fread
fopen
__CxxFrameHandler
_EH_prolog
atoi
fwrite

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43185f5133de83a81af2897aac960721

Headers

File Characteristics

Imports

shell32

ole32

wininet

kernel32

urlmon

msvcp60

msvcrt

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 740B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 740B