e16bda7ee5f9098ed91ac67c1f41a6070a0bff078e46d5ade6b78f2fc7321b31

Sharing

Copy URL Twitter E-mail

General

Target

e16bda7ee5f9098ed91ac67c1f41a6070a0bff078e46d5ade6b78f2fc7321b31
Size

10.0MB
MD5

15499c580c770670061958675bc7eb61
SHA1

6b1f49e723024dc6abd5f3904e67f2c199e35ce5
SHA256

e16bda7ee5f9098ed91ac67c1f41a6070a0bff078e46d5ade6b78f2fc7321b31
SHA512

e35dfefeebc19fffe3b5000f24f0ef4612e056012f0b66b1bbb2887c9e7bdcc0fd4de68f2843bbb4ed393a37185f4bc483d30d1ff1a26a3f6d6bf206c8664515
SSDEEP

196608:2N4iFKfbwhBejyzaSm2+wRde+oa/DJC9nSVlZYlUg1vo5zINp:2NTFGchBeF/STDcntlUgA5zIL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e16bda7ee5f9098ed91ac67c1f41a6070a0bff078e46d5ade6b78f2fc7321b31

Files

e16bda7ee5f9098ed91ac67c1f41a6070a0bff078e46d5ade6b78f2fc7321b31
.exe windows:6 windows x86 arch:x86

67b0d5f1b38ce9e5b5ba8698a9492bb4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\actions-runner\_work\Titanium\Titanium\src\build\symbol\Release\Win32\7zsfx.pdb

Imports

ws2_32

setsockopt
connect
closesocket
send
recv
WSASetLastError
getservbyname
socket
gethostbyaddr
inet_ntoa
htons
htonl
WSAGetLastError
WSACleanup
gethostbyname
select
ntohs
getsockopt
ioctlsocket
shutdown
getservbyport
getaddrinfo
WSAStartup
inet_addr
gethostname
getnameinfo
freeaddrinfo

kernel32

HeapQueryInformation
GetCommandLineW
GetCommandLineA
SetConsoleCtrlHandler
PeekNamedPipe
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
RtlUnwind
OpenEventA
lstrlenA
GetLastError
LoadLibraryA
GetProcAddress
GetTempPathA
GetTempFileNameA
DeleteFileA
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameW
GetModuleHandleW
OutputDebugStringW
ExpandEnvironmentStringsW
LocalFree
CloseHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
CreateFileW
LoadLibraryW
FreeLibrary
GetWindowsDirectoryW
SetCurrentDirectoryW
WaitForSingleObject
GetCurrentProcessId
GlobalUnlock
RemoveDirectoryW
GetUserDefaultUILanguage
MulDiv
InitializeCriticalSection
GlobalLock
GetStdHandle
GetTempPathW
WriteFile
SleepEx
GetFileAttributesW
CreateDirectoryW
DeleteFileW
GetSystemTime
GetTimeZoneInformation
lstrcpyW
GetDiskFreeSpaceExW
SetFileAttributesW
GetLogicalDriveStringsW
lstrlenW
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
FindFirstFileW
MoveFileExW
FindNextFileW
FindClose
IsProcessorFeaturePresent
GetSystemDirectoryW
SetFileTime
MoveFileW
GetFullPathNameW
GetCurrentDirectoryW
GetTempFileNameW
LoadLibraryExW
GetFileSize
SetFilePointer
GetFileInformationByHandle
ReadFile
SetEndOfFile
FileTimeToSystemTime
GetVersionExW
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
CreateEventW
SetEvent
ResetEvent
LCMapStringW
WaitForMultipleObjects
GetSystemDefaultLCID
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocalTime
FlushFileBuffers
CopyFileW
GetCurrentProcess
CreateProcessW
ResumeThread
GetExitCodeProcess
CreateMutexW
ReleaseMutex
PulseEvent
TerminateProcess
GetDriveTypeW
AttachConsole
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
FreeConsole
GetSystemDefaultUILanguage
IsValidLocale
GetUserGeoID
LoadLibraryExA
GetCurrentThreadId
SetThreadPriority
GetExitCodeThread
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
FormatMessageA
FormatMessageW
CreateEventA
DuplicateHandle
QueryPerformanceCounter
WaitForSingleObjectEx
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemDirectoryA
VirtualProtect
GetEnvironmentVariableW
GetFileType
GetACP
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GlobalAlloc
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CompareStringA
EncodePointer
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetLocaleInfoW
GlobalFlags
GetVolumeInformationW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
SystemTimeToTzSpecificLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EnumSystemLocalesW
GetConsoleOutputCP
SetStdHandle
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
VirtualQuery
CreateSemaphoreW
GetGeoInfoW
GetStringTypeW
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
FindFirstFileExW
SetFilePointerEx
LCMapStringEx
CompareStringEx
GetCPInfo

comctl32

InitCommonControlsEx
_TrackMouseEvent

Exports

Exports

CheckConnection
GetIEProxySetting
SentHttp

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67b0d5f1b38ce9e5b5ba8698a9492bb4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

comctl32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 660KB - Virtual size: 659KB

.data Size: 39KB - Virtual size: 68KB

.rsrc Size: 579KB - Virtual size: 579KB

.reloc Size: 120KB - Virtual size: 120KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 660KB - Virtual size: 659KB

.data
Size: 39KB - Virtual size: 68KB

.rsrc
Size: 579KB - Virtual size: 579KB

.reloc
Size: 120KB - Virtual size: 120KB