a390336ccd43926dfec8ad5527aa24aa

General

Target

a390336ccd43926dfec8ad5527aa24aa
Size

48KB
MD5

a390336ccd43926dfec8ad5527aa24aa
SHA1

05e60d764bffc8717a77ead1c7a959fd12f1e032
SHA256

0184772472c123d07c7e11b66bf68f2bb3222c98267f8531b513ac915b0f5bdb
SHA512

11234bf6e3bbdc2be474e25f9466a1e5abc3a1d6f9b0c21e9abb246ac30efe148526d11d1f796c41bf84024670a84161064dbcadcae88cb9b2b8a08ae8d5a63c
SSDEEP

768:6XcXyoR5tQc/djZ4S8bdrCZy0vr5Etmlg:6IRHQc/dEbdrCnvr5Pl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a390336ccd43926dfec8ad5527aa24aa

Files

a390336ccd43926dfec8ad5527aa24aa
.exe windows:4 windows x86 arch:x86

4859ff434e3c451ab854980a805ccfea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

recv
send
closesocket
connect
htons
getservbyname
socket
gethostbyaddr
gethostbyname
ioctlsocket
WSACleanup
WSAStartup

kernel32

GetEnvironmentStrings
SetEndOfFile
HeapSize
LCMapStringW
LCMapStringA
GetLocaleInfoA
InterlockedExchange
RtlUnwind
LoadLibraryA
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
Sleep
GetVolumeInformationA
GetWindowsDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
WideCharToMultiByte
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
HeapFree
CloseHandle
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
HeapAlloc
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
CreateFileA
FlushFileBuffers
VirtualAlloc
HeapReAlloc
SetStdHandle

shell32

ShellExecuteA

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4859ff434e3c451ab854980a805ccfea

Headers

File Characteristics

Imports

wsock32

kernel32

shell32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 8KB