c14bcdba6316f7e42aa0f2c54231e921

General

Target

c14bcdba6316f7e42aa0f2c54231e921
Size

47KB
MD5

c14bcdba6316f7e42aa0f2c54231e921
SHA1

c51f149d1512ddd3e3a25043caf96a2d8eadb97a
SHA256

17e3186fd99e88adab9f49feb4a0f095cf4df81df02708510be395ad1c4d2eec
SHA512

5d44ac3772a537d10c43c96c0f43d24b3b031f746c798913ab98ef95a0327943a39e337c30cee0391a7e988d48a4112a51a900a95b0a0ce12cd395076392a131
SSDEEP

768:9CEbSVFa0wh8ff8p8PqGv0hwqvdxnacva8/0l16/SV/:92a0Sc8p8P7v0CgJacD0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c14bcdba6316f7e42aa0f2c54231e921

Files

c14bcdba6316f7e42aa0f2c54231e921
.exe windows:4 windows x86 arch:x86

c882e1e107b9f0ae83872a4f31e49e70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetTickCount
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetSystemTimeAsFileTime
CreateThread
HeapFree
HeapAlloc
ExitProcess
WriteFile
CloseHandle
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
CreateFileA
Sleep
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
GetWindowsDirectoryA
FreeLibrary
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

shell32

ShellExecuteA

ws2_32

htons
htonl
setsockopt
closesocket
WSAStartup
recv
send
connect
bind
socket
inet_ntoa
ntohl
gethostbyname

user32

wsprintfA

advapi32

ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

SHSetValueA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c882e1e107b9f0ae83872a4f31e49e70

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ws2_32

user32

advapi32

shlwapi

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 44B - Virtual size: 3KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 44B - Virtual size: 3KB