8d457d654b3865ece53514bd80d714a9

General

Target

8d457d654b3865ece53514bd80d714a9
Size

156KB
MD5

8d457d654b3865ece53514bd80d714a9
SHA1

7f625e301f527d5261ed335a9d96e280fa5c86ff
SHA256

fd610152696dd0c0fa53f7c5c630adee910005e9cf07027ecb6023304a72cfd8
SHA512

f8cb9342bf43211d8bac7ddea081f52aba656b0c95765e65e588e24bb64414e19c2c49905b27ea4d3cbb52c0cc9671bb91582d97872924c75b5c104357b0fe0e
SSDEEP

1536:5okQVUrWA+EPszjnOf9RmnG+Rom1BJ9KL2Gplo6E/I:SjVUrR+mszjOfvmGIBJwL2GboO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d457d654b3865ece53514bd80d714a9

Files

8d457d654b3865ece53514bd80d714a9
.exe windows:4 windows x86 arch:x86

8b9ed6bdc37a3cfcbe99f7e4cbff14a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
htons
ioctlsocket
socket
bind
sendto

kernel32

GetStartupInfoA
LCMapStringW
LCMapStringA
CloseHandle
SetStdHandle
GetOEMCP
GetACP
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
SetConsoleCtrlHandler
GetProcAddress
LoadLibraryA
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
SetHandleCount
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b9ed6bdc37a3cfcbe99f7e4cbff14a6

Headers

File Characteristics

Imports

wsock32

kernel32

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB