75f6b0452d6aed6d81231a317b3610ec

General

Target

75f6b0452d6aed6d81231a317b3610ec
Size

12KB
MD5

75f6b0452d6aed6d81231a317b3610ec
SHA1

a48dec7795d0cb04f3414715ec225f43ae59cc63
SHA256

bf6d96ef29c95d38eb85db58694b27b1b018fdb655d04869906815872078be22
SHA512

36331a1015c396b1785d18bae66894a26cb37fe3bcb7438cf05c16b33ce4db22a637ea9b3d4cee23a18d1e81e350dec08a1f7cdada64c6cda67b854bfa7d8840
SSDEEP

384:7ZYh43RTW/3RrJ+lrvfPSkkv3cc5WtPR55:7w4BSPR0rv0156PD5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75f6b0452d6aed6d81231a317b3610ec

Files

75f6b0452d6aed6d81231a317b3610ec
.exe windows:4 windows x86 arch:x86

e7a8b7f32b94428c9b3c76d3959f1fb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
WriteFile
SetFilePointer
CreateFileA
ExitProcess
lstrcmpiA
Sleep
lstrlenA
GetModuleFileNameA
CreateEventA
DeleteFileA
GetTempPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
lstrcpyA
WinExec
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

user32

wsprintfA

advapi32

OpenProcessToken
DuplicateTokenEx
CreateProcessAsUserA

msvcr80

rand
atoi
memcpy
memset
strncpy_s
_crt_debugger_hook
strchr
strstr
srand

ws2_32

gethostbyname
setsockopt
WSAEventSelect
recv
WSAStartup
inet_addr
htons
shutdown
connect
closesocket
inet_ntoa
WSACleanup
socket
gethostname
send

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7a8b7f32b94428c9b3c76d3959f1fb5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcr80

ws2_32

userenv

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 428B

.vmp0 Size: 4KB - Virtual size: 3KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 428B

.vmp0
Size: 4KB - Virtual size: 3KB