751f27310d319973ebda39f59fa2d004

Sharing

Copy URL

Twitter E-mail

General

Target

751f27310d319973ebda39f59fa2d004
Size

20KB
MD5

751f27310d319973ebda39f59fa2d004
SHA1

b427744b2781bc344b96907bf7d68719e65e9dcb
SHA256

dd5029a2dc33c7c3f93d60fb11dc7123719da9bb89c2c0d7191483694f9d37ec
SHA512

60a891dbb202028fa0984e23005b29a013b3dd885385c2ca0d5650ede5794490faee30cd1c47153b10a83fdcb15f900da6dc7e562c9d6272728ffea908c47564
SSDEEP

384:vMCplENKgMwW6nyI4GS1dmrREBmhIbDLUBrxIaa:vM0lEN/uCug2bDLSu

Score

1^/10

Malware Config

Signatures

Files

751f27310d319973ebda39f59fa2d004
.exe windows:4 windows x86 arch:x86

96520344085f2f9d6f1b638d99d06a02

Code Sign

06:fc:34:d3:43:cf:6a:8c:41:e3:aa:c2:85:d6:e4:87
Certificate

Issuer

CN=yoyojitox

Not Before

01-01-2021 08:00

Not After

01-01-2027 08:00

Subject

CN=yoyojitox

Extended Key Usages

ExtKeyUsageCodeSigning

e3:81:66:9c:15:12:e1:94:75:69:ad:ea:7d:36:7c:0e:83:6a:85:4d
Signer

Actual PE Digest

e3:81:66:9c:15:12:e1:94:75:69:ad:ea:7d:36:7c:0e:83:6a:85:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ws2_32

WSAConnect
WSASocketA

wsock32

htons
ioctlsocket
WSAStartup

kernel32

CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
realloc
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 656B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96520344085f2f9d6f1b638d99d06a02

Code Sign

06:fc:34:d3:43:cf:6a:8c:41:e3:aa:c2:85:d6:e4:87Certificate

Extended Key Usages

e3:81:66:9c:15:12:e1:94:75:69:ad:ea:7d:36:7c:0e:83:6a:85:4dSigner

Headers

File Characteristics

Imports

ws2_32

wsock32

kernel32

msvcrt

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 28B

.rdata Size: 1024B - Virtual size: 732B

.eh_fram Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 656B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

06:fc:34:d3:43:cf:6a:8c:41:e3:aa:c2:85:d6:e4:87
Certificate

e3:81:66:9c:15:12:e1:94:75:69:ad:ea:7d:36:7c:0e:83:6a:85:4d
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 28B

.rdata
Size: 1024B - Virtual size: 732B

.eh_fram
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 656B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B