a332b26f255b3c8a13cd6bd8f67f4387

General

Target

a332b26f255b3c8a13cd6bd8f67f4387
Size

189KB
MD5

a332b26f255b3c8a13cd6bd8f67f4387
SHA1

f724929f98313ca3271c6a653f4aeb3b68ec4a43
SHA256

cb820e8cb5134272cb4c849682b2728fb40e09d6ac914274e361a5c1be851e82
SHA512

18cb03a4e646c45dedd6713b5ecea0c723d008ae984c9f360aa54a8816c0d8586b180b661c695a3e6d9eaf9d530a97a6816a2cf5177a07e4a49524cc8806718c
SSDEEP

3072:9BgW+dUEGvfZ3d/NSDs0/rx7uGm9wr8xblwuY4pWSHUtULXPo31nSKn:9B2tGvl4b/x+CuY4dUtULfo31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a332b26f255b3c8a13cd6bd8f67f4387

Files

a332b26f255b3c8a13cd6bd8f67f4387
.exe windows:4 windows x86 arch:x86

44a76bbc28bf699c949e1d4e9062a1f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
select
__WSAFDIsSet
accept
send
recv
closesocket

kernel32

CreateThread
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetTickCount
GetVersionExA
Sleep
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
GetWindowsDirectoryA
FormatMessageA
GetLastError
GlobalUnlock
GlobalLock
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
CreateFileA
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
WriteFile
GetTempPathA
LoadLibraryA
GetProcAddress
GetLocaleInfoA
ExitThread
TerminateThread
OpenProcess
GetCurrentProcessId
CopyFileA
ExitProcess
WaitForSingleObject
CreateMutexA
MoveFileA
DeleteFileA
GetLocalTime
WideCharToMultiByte
MultiByteToWideChar
GetComputerNameA
GetCurrentProcess
TerminateProcess
GetLogicalDrives
GetFileSize
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
ReadFile
SetFilePointer
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
QueryPerformanceCounter
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapFree
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44a76bbc28bf699c949e1d4e9062a1f8

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 63KB - Virtual size: 372KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 63KB - Virtual size: 372KB