c65c034bef43c4b18f16f8329c5fa74c

General

Target

c65c034bef43c4b18f16f8329c5fa74c
Size

16KB
MD5

c65c034bef43c4b18f16f8329c5fa74c
SHA1

93cfa46ac85307135c7fc8d7686351d89e065a1d
SHA256

74082515142e09436ae6c51a28060647398afe6731825be33eebea48f1c3ff0b
SHA512

dac4f1a8c8b47402481a012d75dbcada3ebaa6189dfaa9be711d72cd9a925092ce26b8eb3a7d378518527931da90e9ab1517d85585d06f4284fdc75cc324603a
SSDEEP

384:HRSg/0kP96pfMSrELSTKdCUrac3V6yjnJOXFQ:xSGBP96poMUx0yjnKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65c034bef43c4b18f16f8329c5fa74c

Files

c65c034bef43c4b18f16f8329c5fa74c
.dll windows:4 windows x86 arch:x86

5d897cbad22ae482671f7e8a1ab9a9c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
CloseHandle
GetCurrentProcess
Thread32Next
SuspendThread
GetModuleHandleA
Thread32First
Process32Next
lstrcmpiA
GetProcAddress
CreateToolhelp32Snapshot
ReadFile
ReadProcessMemory
Sleep
CreateProcessA
ExitThread
GetSystemDirectoryA
OutputDebugStringA
WriteProcessMemory
CreateThread
Process32First

user32

SetWindowsHookExA
DispatchMessageA
GetMessageA
TranslateMessage
CallNextHookEx

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

msvcrt

sprintf
strcmp
_except_handler3
memcpy
memcmp
strlen
strcat
strcpy
memset

wininet

HttpSendRequestA
HttpSendRequestW
InternetCloseHandle
HttpOpenRequestA
InternetConnectA
InternetOpenA

ws2_32

WSACleanup
closesocket
send
connect
gethostbyname
inet_addr
htons
socket
WSAStartup

Exports

Exports

GOODBOY

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d897cbad22ae482671f7e8a1ab9a9c4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

ws2_32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 3KB

Shared Size: 512B - Virtual size: 348B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 3KB

Shared
Size: 512B - Virtual size: 348B

.reloc
Size: 1KB - Virtual size: 1KB