dfaaffc1cb4fbbb9d6f9b1d30c26a298dad620277683150c4527ad5eb99fdd09

General

Target

dfaaffc1cb4fbbb9d6f9b1d30c26a298dad620277683150c4527ad5eb99fdd09
Size

67KB
MD5

d0c2f0717b5be3b75003cfdd91587df6
SHA1

9e98763b66e0846203b5628fbefa04a22c316f57
SHA256

dfaaffc1cb4fbbb9d6f9b1d30c26a298dad620277683150c4527ad5eb99fdd09
SHA512

9da4b00887659ddb7d483307f48f3132f475b2755637afc000e998cf061979b379684d212b27d37f1b896002bee17de4be07e6dd2bba1b1e4b0cb07c4fa8a245
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1RewM1:ulg35GTslA5t3pewM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfaaffc1cb4fbbb9d6f9b1d30c26a298dad620277683150c4527ad5eb99fdd09

Files

dfaaffc1cb4fbbb9d6f9b1d30c26a298dad620277683150c4527ad5eb99fdd09
.exe windows:4 windows x86 arch:x86

c1246ca9ec291149221a5cbc329bf1a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueExW

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
GetCommandLineA
GetComputerNameA
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryA
OpenProcess
Process32First
Process32Next
ReadFile
SetFileAttributesA
SetFilePointer
SetFileTime
SetPriorityClass
Sleep
TerminateProcess
VirtualAlloc
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA

user32

ExitWindowsEx
wsprintfA

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
getsockopt
htons
inet_addr
ioctlsocket
recv
select
send
socket

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 880B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1246ca9ec291149221a5cbc329bf1a2

Headers

File Characteristics

Imports

advapi32

kernel32

user32

ws2_32

Sections

.text Size: 22KB - Virtual size: 21KB

.data Size: 39KB - Virtual size: 39KB

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 880B

.idata Size: 2KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 21KB

.data
Size: 39KB - Virtual size: 39KB

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 880B

.idata
Size: 2KB - Virtual size: 2KB