774222a185a28337568e676ee0c68b06

Sharing

Copy URL Twitter E-mail

General

Target

774222a185a28337568e676ee0c68b06
Size

76KB
MD5

774222a185a28337568e676ee0c68b06
SHA1

3d4d73b541185d33d7b7372f9269c8c72146df6d
SHA256

faa2f4bb83e6c9abf328a47f54592f7702fb5114e6b27eb7a764662a0d2d0fce
SHA512

7d075a4a9f2bc77487dafac5a892d82575cf2b955661706656194a4bd10bf34433a627ead1ac5d0ff06ac3ca00c3b5462f8621b3553204eb1dbed2b73f414f3c
SSDEEP

768:RSzgBBJIPBPud6cBgQiyLTnOYcRTWpLM/xzg/5LGevEVtJdyrV3oV7uA:EYjkuM8nTnOYdLa0JGrjJA3oV7uA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774222a185a28337568e676ee0c68b06

Files

774222a185a28337568e676ee0c68b06
.dll windows:4 windows x86 arch:x86

8b99edd995c6ff9fd0bbaff4e348e5e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RemoveDirectoryA
CreateDirectoryA
SearchPathA
SetCurrentDirectoryA
WriteFile
ReadFile
MoveFileA
GetFileSize
CloseHandle
CreateFileA
GetDriveTypeA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
GetComputerNameA
GetSystemDirectoryA
CreateProcessA
SetFilePointer
FindClose
GetLastError
FindNextFileA
FindFirstFileA
TerminateProcess
OpenProcess
GetCurrentProcess
Process32First
CreateToolhelp32Snapshot
FileTimeToSystemTime
GetCurrentDirectoryA
GetLogicalDriveStringsA
Process32Next
DeleteFileA
Sleep
GetVersionExA
GetSystemInfo
ExitProcess
WideCharToMultiByte
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
RtlUnwind
GetCommandLineA
GetVersion
CreateThread
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
LoadLibraryA
GetStringTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
GetExitCodeProcess
WaitForSingleObject
MultiByteToWideChar
GetStringTypeA
InterlockedDecrement
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
GetUserNameA

ws2_32

socket
gethostname
WSAStartup
gethostbyname
inet_ntoa
inet_addr
WSASocketA
WSACleanup
htons
connect
closesocket
send
select
recv

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b99edd995c6ff9fd0bbaff4e348e5e6

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB