71cb8f842ecca45e1db0c9e04f44bf4d

Sharing

Copy URL Twitter E-mail

General

Target

71cb8f842ecca45e1db0c9e04f44bf4d
Size

28KB
MD5

71cb8f842ecca45e1db0c9e04f44bf4d
SHA1

61ae68ff50838a2b135625ff45fb9305f8040752
SHA256

731781e3487c16e0dcdbc6915f9db4d86a863bc46b6f76ad103fa895d93f0684
SHA512

5e1bab3ee83aa0ed17bf59f295c8b2c569824f3a33a951913c5359a8fa78dc0646ca19add0b7c1f93fe8a7fa52a71cdadc5a232cd1a4a1cd6830b77cc109cc8b
SSDEEP

192:NESU22v/b6c5GDeFMTCrbvG7HAELCCqYUhBVlrYRurxaxJhto:HU22HOc5TKOvG7gELCdrxaxJhe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71cb8f842ecca45e1db0c9e04f44bf4d

Files

71cb8f842ecca45e1db0c9e04f44bf4d
.dll windows:4 windows x86 arch:x86

aeadb803931b0362caa755afca8772e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile

kernel32

OutputDebugStringA
GetSystemDirectoryA
GetTempPathA
CopyFileA
Sleep
GlobalFindAtomA
OpenMutexA
CreateThread
GetModuleFileNameA
GetCurrentProcess
CreateMutexA
GlobalAddAtomA

urlmon

URLDownloadToFileA

msvcp60

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

fread
_adjust_fdiv
_initterm
??2@YAPAXI@Z
sprintf
strcpy
strchr
free
malloc
strrchr
strlen
memset
fclose
strcmp
ftell
fseek
fopen
__CxxFrameHandler
_EH_prolog
atoi
fwrite
strcat
memcpy

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeadb803931b0362caa755afca8772e9

Headers

File Characteristics

Imports

shell32

wininet

kernel32

urlmon

msvcp60

msvcrt

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 738B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 738B