c55e218b1b8f3af2554c32bfc6acfb82

Sharing

Copy URL Twitter E-mail

General

Target

c55e218b1b8f3af2554c32bfc6acfb82
Size

108KB
MD5

c55e218b1b8f3af2554c32bfc6acfb82
SHA1

d9bb645120e00f531b7fa53412bac6b5a39bd742
SHA256

2ef9a072ead17c3465c7f56dab35935aa1e3547c4ff0240a2d0efd6e74fc936d
SHA512

0cc457fac354d55be96a7c1fb28578333236bf5dba7f917d7dd8bb248d13819d9819d15a8cffa3e7da45ae90dd1f268cba8f1bcdf8f2c604312ae4fed1204c7b
SSDEEP

1536:RySvEtQwOxcPz0wHNDYHQa/HAwai4HQHWFx7qzrzlpyH+Jq3z/V2:tqPzZS9HA9i4HeYqzrzlpyH+JqJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c55e218b1b8f3af2554c32bfc6acfb82

Files

c55e218b1b8f3af2554c32bfc6acfb82
.exe windows:4 windows x86 arch:x86

ec98731851ee28b42005886048fd4a97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetModuleFileNameA
Sleep
CreateThread
DeleteFileA
CloseHandle
MoveFileExA
lstrlenA
WriteFile
CreateFileA
GetTickCount
GetTempPathA
LoadLibraryA
GetWindowsDirectoryA
WinExec
SetFileAttributesA
GetLastError
ReleaseMutex
OpenMutexA
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
ExitProcess
CreateMutexA
ReadFile
lstrcmpiA
GetSystemDirectoryA
GetCurrentThreadId
CreateDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
GetStringTypeA
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
IsBadCodePtr
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsBadReadPtr
SetUnhandledExceptionFilter
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
ExitThread
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
HeapFree
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
SetEndOfFile
FlushFileBuffers
HeapReAlloc
IsBadWritePtr

shell32

ShellExecuteA

ws2_32

htons
WSAStartup
send
__WSAFDIsSet
recv
WSAIoctl
socket
connect
closesocket
inet_addr
sendto
setsockopt
WSASocketA
htonl
select

wininet

InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec98731851ee28b42005886048fd4a97

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

wininet

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 18KB - Virtual size: 23KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 18KB - Virtual size: 23KB

.rsrc
Size: 10KB - Virtual size: 9KB