c47fe9b7a3b72937adeb665432aeeff5

General

Target

c47fe9b7a3b72937adeb665432aeeff5
Size

56KB
MD5

c47fe9b7a3b72937adeb665432aeeff5
SHA1

4f3d927e5695e9c7b2dde9f5adf5258c4c529759
SHA256

06545798b1a425de26ec4eeed580544f2b615edc2f097567fe3bc3e39e9fff78
SHA512

beb26ab9ffb2358918243438add5eb561043f57e595e8142f8852245270fea661f74cd45f149694efbbed78a36ef5c8ef7f99db7f8fc353421c285f27319b191
SSDEEP

1536:vrCIx/UgWdbezTVI6gSjP6gWjltTaIHsGLm4WGGo1:vNx/BgBns0WGGo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c47fe9b7a3b72937adeb665432aeeff5

Files

c47fe9b7a3b72937adeb665432aeeff5
.exe windows:4 windows x86 arch:x86

84bd5fb4ea358278597a52057fe5e000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
OpenProcess
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
lstrcatA
GetSystemDirectoryA
GetCurrentProcess
GetLocaleInfoA
GetACP
GetVersionExA
GetStringTypeA
LCMapStringW
LoadLibraryA
GetProcAddress
lstrcpyA
CreateRemoteThread
FreeLibrary
CreateProcessA
Sleep
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStringTypeW
GetStdHandle
SetHandleCount
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW

user32

wsprintfA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken

ws2_32

gethostname
WSACleanup
gethostbyname
WSAStartup
inet_ntoa

netapi32

Netbios

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84bd5fb4ea358278597a52057fe5e000

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

netapi32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 13KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 13KB