c4fdaa03d2fff3fa73528592b1746eb4

General

Target

c4fdaa03d2fff3fa73528592b1746eb4
Size

148KB
MD5

c4fdaa03d2fff3fa73528592b1746eb4
SHA1

fa4825e783724dc75f6a9a3f7d09fc7c64e318b9
SHA256

07bf304d44d996dcdad657d95cd688c4b7f33f7eb7bf1db8eb1435803ff852ef
SHA512

63ff70f1c289b8d0bab9606953157cbfdf2f6a3f19869d7c230fe5a4e95f9f4844c0f8513642b3e6b971297a0c59958e2b4dc3e26a4759b303b860f496c1254d
SSDEEP

3072:uFK49Fm3EsaxrbnRtdThHGBRxY+Lt+jYvEXLnym7a5ZTjCWpr1o:uFK4eaTZT0nLt+8kq9++r1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4fdaa03d2fff3fa73528592b1746eb4

Files

c4fdaa03d2fff3fa73528592b1746eb4
.exe windows:4 windows x86 arch:x86

650f6bf3cec034d82a24547d25459855

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
SetFilePointer
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileW
CloseHandle
GetLastError
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
FlushFileBuffers

ole32

OleCreate
CoInitialize
StgCreateDocfile
CoSuspendClassObjects
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc

ws2_32

ioctlsocket
listen
ntohl
inet_addr
select
recv
send
socket
inet_ntoa
WSAConnect
WSACreateEvent
WSAGetOverlappedResult
WSASocketA
WSAWaitForMultipleEvents

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

650f6bf3cec034d82a24547d25459855

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

ws2_32

Sections

.text Size: 52KB - Virtual size: 49KB

.data Size: 60KB - Virtual size: 63KB

.rsrc Size: 28KB - Virtual size: 26KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 49KB

.data
Size: 60KB - Virtual size: 63KB

.rsrc
Size: 28KB - Virtual size: 26KB

.reloc
Size: 4KB - Virtual size: 1KB