acdb30d2bc9f4129863e6b40f350f5b6

Sharing

Copy URL Twitter E-mail

General

Target

acdb30d2bc9f4129863e6b40f350f5b6
Size

171KB
MD5

acdb30d2bc9f4129863e6b40f350f5b6
SHA1

6d47b54484411d415e21d09688567582b5a6a381
SHA256

cf25ba3acb96b4a4c6b21f80fe841aa29eb93d68073ac306e1c117b0192b7c23
SHA512

7fbf2dfee2c193ca7feaa0518abadea027dcd1257054caf441e3e521854d75fb8cae5d631658ef28444eaab5d34685398a708ba1f6ba18555457dae9887e02d3
SSDEEP

3072:wW4t9r4Hp50e6K7HSKxk9Y1ttscno8BZem46+ZjSgxQ:It9r4H30e6Qu9q/ztJ46+JD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acdb30d2bc9f4129863e6b40f350f5b6

Files

acdb30d2bc9f4129863e6b40f350f5b6
.exe windows:4 windows x86 arch:x86

a4ae8484fd803fc2202b24445b8950d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostname
gethostbyname
inet_ntoa
inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
send
select
__WSAFDIsSet
accept
recv
closesocket

kernel32

CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetLastError
Sleep
CreateThread
GetModuleFileNameA
lstrcmpiA
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
CloseHandle
WriteFile
CreateFileA
MultiByteToWideChar
ReadFile
TransactNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ExitProcess
CreateProcessA
GetSystemDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTimeFormatA
GetDateFormatA
GetFileSize
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFilePointer
LoadLibraryA
GetProcAddress
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
WideCharToMultiByte
GetComputerNameA
CopyFileA
GetCurrentProcess
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
GetLocaleInfoA
GetVersionExA
GetLogicalDrives
GlobalMemoryStatus
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetCPInfo

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a4ae8484fd803fc2202b24445b8950d4

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 50KB - Virtual size: 584KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 50KB - Virtual size: 584KB