bc41ca8b28cefbef19913892893b6fdc

General

Target

bc41ca8b28cefbef19913892893b6fdc
Size

24KB
MD5

bc41ca8b28cefbef19913892893b6fdc
SHA1

7873b97f271893da5977b7033e1d1ffca194e682
SHA256

dc1a821510bb64fab32a16c29d554fa23f474d2e63ad250d2756a4f4c3a1501e
SHA512

72a12937274234100222afd02f6e31e3de607127fe5850aaa8cfb0fa2253ede0561a46cc5c080ddb6cec99e8009d61438e7fde8040c65be994a0f2f12ef41627
SSDEEP

384:Hw8s6S7GEsv9pWDeAFBis/QhGvsFTM9/7/qI0RSojYE0W:Hw8QGEM8DeA7i+QhGvsFgiI0RS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc41ca8b28cefbef19913892893b6fdc

Files

bc41ca8b28cefbef19913892893b6fdc
.exe windows:4 windows x86 arch:x86

bb2c8723431f3416018e4e6081146123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSASocketA
setsockopt
htonl
sendto
inet_addr
gethostbyname
recv
WSACleanup
WSAGetLastError
closesocket
WSAStartup
socket
htons
connect
send
WSAAsyncSelect

kernel32

GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
HeapAlloc
GetCurrentProcessId
lstrcpyA
CloseHandle
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
MapViewOfFile
UnmapViewOfFile
Process32First
CreateToolhelp32Snapshot
GetLastError
ExitProcess
WinExec
CreateThread
Sleep
lstrcatA
MoveFileExA

user32

wsprintfA
DefWindowProcA
ExitWindowsEx
PostQuitMessage
MessageBoxA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

SetEntriesInAclA
SetSecurityInfo
GetSecurityInfo
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

msvcp60

??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

msvcrt

atoi
_stricmp
strstr
rand
printf
_itoa
__CxxFrameHandler
sprintf
malloc
_strnset
_strlwr
strcspn
strncpy

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb2c8723431f3416018e4e6081146123

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

msvcp60

msvcrt

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 3KB