77bf43ec1781f38e8eead3569233fad1

Sharing

Copy URL Twitter E-mail

General

Target

77bf43ec1781f38e8eead3569233fad1
Size

56KB
MD5

77bf43ec1781f38e8eead3569233fad1
SHA1

e2b581b852bc0b6b2fedf5d9aa8ed4af2cbe3f52
SHA256

00aedbce768d892f5ef62b399feac5cb32526d52602d5e73122c57f7e9bf384e
SHA512

e080cac61217a5c75aa677c2f082ef5297ef764ffbcc7d383ca83324d1749cae859757096c644dc439070c4c4a7f5391d38c474fa4199536dfd28ddc86d4cc69
SSDEEP

768:UQSlBzVUPDJxynPBsmnFgfHAef1pB+kLIJkilIoBQ6:UZlQPD+BbAHAeNXygoBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77bf43ec1781f38e8eead3569233fad1

Files

77bf43ec1781f38e8eead3569233fad1
.exe windows:4 windows x86 arch:x86

e0658f8faf6ea8538dd6953c9e00ad63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
WSAStartup
closesocket
inet_addr
gethostbyname
htons
connect
gethostname
inet_ntoa
send
recv
setsockopt
WSACleanup

psapi

EnumProcesses
GetModuleBaseNameA
EnumProcessModules

kernel32

SetUnhandledExceptionFilter
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetFilePointer
FlushFileBuffers
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
MapViewOfFile
CloseHandle
GetVersionExA
UnmapViewOfFile
ExitProcess
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
FindClose
CopyFileA
GetModuleFileNameA
GetLastError
FindFirstFileA
OutputDebugStringA
GetSystemDirectoryA
CreateMutexA
OpenMutexA
OpenProcess
CreateRemoteThread
GetModuleHandleA
GetCurrentProcessId
WriteProcessMemory
VirtualAllocEx
HeapFree
HeapAlloc
GlobalFree
GlobalAlloc
SetStdHandle
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
RaiseException
HeapSize
DeleteFileA
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStartupInfoA
GetFileType
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
WriteFile
TerminateProcess
GetCurrentProcess
GetFileAttributesA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo

shell32

ShellExecuteA

oleaut32

VariantClear

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0658f8faf6ea8538dd6953c9e00ad63

Headers

File Characteristics

Imports

ws2_32

psapi

kernel32

user32

advapi32

shell32

oleaut32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB