79458260aa580746d3b57a91ae1670e1

General

Target

79458260aa580746d3b57a91ae1670e1
Size

133KB
MD5

79458260aa580746d3b57a91ae1670e1
SHA1

ee0ad61c0ee06f225d3f928a920191b42674f660
SHA256

0ce260afe33043646f81229acacddff1780e811ff639a12d6f74ab8780c6a701
SHA512

33a923212c7e5eaa857a8084a43bc01bf95c3889d4da92b670a9b1d728a8e07468648ac0dc37c8fdcca7d6f821ca7ae953c1413b520c060dfac3aa9fa68c040c
SSDEEP

3072:0HqyyeUlmNpxTC+ep3wHYfT9iNSiIp3pHZ2tzj:LynTpa3wHY79iN0HM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79458260aa580746d3b57a91ae1670e1

Files

79458260aa580746d3b57a91ae1670e1
.exe windows:4 windows x86 arch:x86

693ce23328958ec1897014ce5da9c5cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
getpeername

kernel32

FreeEnvironmentStringsW
GetSystemInfo
VirtualProtect
GetProcAddress
SuspendThread
LoadLibraryA
HeapAlloc
HeapReAlloc
GetProcessHeap
GetTickCount
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
CloseHandle
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

user32

wsprintfA
wvsprintfA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

693ce23328958ec1897014ce5da9c5cf

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 16KB

.rsrc Size: 101KB - Virtual size: 101KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 16KB

.rsrc
Size: 101KB - Virtual size: 101KB