a196714a7b50c240024a2b4d61b0f581

General

Target

a196714a7b50c240024a2b4d61b0f581
Size

42KB
MD5

a196714a7b50c240024a2b4d61b0f581
SHA1

1d57dabb11d878f09cdc0df58df46432195b85a7
SHA256

f744e357dd7d55701cb49398c3cdf3672a1cb466e69432221d7668e6d2e0d093
SHA512

48f85c552dcc308294ed7742417f5371e79977ca1a948dd3c4d094de63067a0422a8c875319e91a7512399f4e0c62a6809142a3f2602cdaabef5914d75d3c888
SSDEEP

768:/tPGo8A4GEAYqg+0CsrajIymzRmxUX9f2OCv8ikSzZGjDW95V2re:/tPyAdNlgX+GmCVQv8iJ4DW95wi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a196714a7b50c240024a2b4d61b0f581

Files

a196714a7b50c240024a2b4d61b0f581
.exe windows:4 windows x86 arch:x86

b1eb414893d97b37e9d28113a729e1e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetModuleFileNameA
lstrlenA
GetLastError
CopyFileA
GetSystemDirectoryA
GetModuleHandleA
GlobalMemoryStatus
GetComputerNameA
GetCurrentProcess
GetTempPathA
DeleteFileA
CreateProcessA
ExitProcess
lstrcpyA
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
ExitThread
GetShortPathNameA
GetTickCount
GetStartupInfoA

user32

ExitWindowsEx
wsprintfA

advapi32

StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
OpenSCManagerA
OpenServiceA
DeleteService
CreateServiceA
RegOpenKeyA

shell32

ShellExecuteA

ws2_32

gethostbyname
inet_ntoa
connect
send
closesocket
recv
WSASocketA
setsockopt
htons
inet_addr
htonl
sendto
WSACleanup
WSAStartup
WSAGetLastError
socket

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_except_handler3
strncmp
exit
malloc
sprintf
time
rand
printf
strncpy
strcspn
strstr
srand

Sections

.data
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b1eb414893d97b37e9d28113a729e1e0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

msvcrt

Sections

.data Size: 42KB - Virtual size: 55KB

.data
Size: 42KB - Virtual size: 55KB