7a2cfc4116d5562aeca0f4e6dd7fdb10

General

Target

7a2cfc4116d5562aeca0f4e6dd7fdb10
Size

36KB
MD5

7a2cfc4116d5562aeca0f4e6dd7fdb10
SHA1

347663ac12d534ab6fcc0548cbc55ebadf01f529
SHA256

711dfc5206f4f064f5453d360b9f6f2c0a0233f5de31556511c57184994d4d18
SHA512

70b2936bf47cf4667abc4674ea5a678f76cfb421021ae3c748756b3908938bc47b09f2f11bf19ec2a2ba89f2a70764a8a981d8da9b44b48931577d73b5d9352d
SSDEEP

768:3uKuTxX+GpBMyvT6iYnqGSjFz2iibKRyQhTq0po9S:3ryvT6iYnqHJKiosyUhos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a2cfc4116d5562aeca0f4e6dd7fdb10

Files

7a2cfc4116d5562aeca0f4e6dd7fdb10
.exe windows:4 windows x86 arch:x86

7a1364fb4ed73909d3f590664a278f8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA

user32

DestroyWindow
CreateWindowExA
DispatchMessageA
RegisterClassExA
DefWindowProcA
PeekMessageA

wsock32

bind
recv
send
WSAStartup
socket
htonl
htons
listen
closesocket
WSACleanup
inet_ntoa
select
accept

kernel32

HeapDestroy
HeapCreate
TlsAlloc
GetCPInfo
FlushFileBuffers
ReadFile
SetStdHandle
GetOEMCP
GetACP
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
CreateSemaphoreA
CloseHandle
ReleaseSemaphore
CreateThread
WaitForSingleObject
GetVersionExA
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
SetFilePointer
SetLastError
TlsGetValue
GetLastError
LCMapStringW
TerminateProcess
GetStringTypeA
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
WriteFile
GetStringTypeW
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a1364fb4ed73909d3f590664a278f8b

Headers

File Characteristics

Imports

advapi32

user32

wsock32

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB