96055e9702e874958f9a69dc22935aae9542a56cee0f6000a3dbc0e69f8df4d9

Sharing

Copy URL Twitter E-mail

General

Target

96055e9702e874958f9a69dc22935aae9542a56cee0f6000a3dbc0e69f8df4d9
Size

28KB
MD5

8d66bd5b21939d02ea178eba908e8279
SHA1

1516a0809050b06e302639045e57fb2ea03c3369
SHA256

96055e9702e874958f9a69dc22935aae9542a56cee0f6000a3dbc0e69f8df4d9
SHA512

93aef78430b128f069989c1400c58a26b81fa49814446c9941d5319b9c65ccdff9f44fc20adbb7875a6ff11e93257d85b1d004894837fd1b9479ee8549ccc604
SSDEEP

192:3JAhivqoujx1s+g9lSHg+MyCNssNecj0EwmIx9RxGCDq1iddwsAxS26P7iGIvgeR:5Af9e+ossNecj7atx0sAxIjIr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96055e9702e874958f9a69dc22935aae9542a56cee0f6000a3dbc0e69f8df4d9

Files

96055e9702e874958f9a69dc22935aae9542a56cee0f6000a3dbc0e69f8df4d9
.dll windows:4 windows x86 arch:x86

eaaacb33572f420e7404ce273ef5105a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

messaging

??0MimeEnvelope@Messaging@A2B@@QAE@I@Z
??0HttpEnvelope@Messaging@A2B@@QAE@XZ
?SetResponseReason@HttpEnvelope@Messaging@A2B@@QAEDPBD@Z
?SetResponseStatus@HttpEnvelope@Messaging@A2B@@QAEGG@Z
?GetSoapAction@SoapEnvelope@Messaging@A2B@@QAEPBDXZ
?DecodeRequest@Envelope@Messaging@A2B@@UAEDAAVTransport@Transports@3@@Z
?SetResponseVersion@HttpEnvelope@Messaging@A2B@@QAEEE@Z
??0UrlEnvelope@Messaging@A2B@@QAE@XZ
??0Serializable@Messaging@A2B@@QAE@PBD0EE@Z
??0HttpSoapBinding@Messaging@A2B@@QAE@XZ
??0SoapEnvelope@Messaging@A2B@@QAE@XZ
??0MimeUrlBinding@Messaging@A2B@@QAE@XZ
?SetBody@Envelope@Messaging@A2B@@QAEPAV123@PAV123@@Z
?_exception_code@Exception@Headers@Messaging@A2B@@QAEPBDXZ
?GetExceptionDescription@Exception@Headers@Messaging@A2B@@QAEPBDXZ
?SetExceptionCode@Exception@Headers@Messaging@A2B@@QAEDPBD@Z
?GetExceptionDetail@Exception@Headers@Messaging@A2B@@QAEPBDXZ
?SetExceptionDescription@Exception@Headers@Messaging@A2B@@QAEDPBD@Z
?SetExceptionDetail@Exception@Headers@Messaging@A2B@@QAEDPBD@Z
?GetRequestURI@HttpEnvelope@Messaging@A2B@@QAEPBDXZ
?GetEncodedHeader@MimeEnvelope@Messaging@A2B@@QAEPADXZ
??0WebServiceMessage@Messaging@A2B@@QAE@XZ
?SetBinding@Envelope@Messaging@A2B@@QAEPAVBinding@23@PAV423@@Z
?SetOperation@RequestHeader@Headers@Messaging@A2B@@QAEDPBD@Z
?SetAllowExtraElements@Serializable@Messaging@A2B@@QAEEE@Z
?SetRequestMsg@WebServiceMessage@Messaging@A2B@@QAEPAVSerializable@23@PAV423@@Z
?SetResponseStatus@ResponseHeader@Headers@Messaging@A2B@@QAEDPBD@Z
??1WebServiceMessage@Messaging@A2B@@UAE@XZ
??1MimeEnvelope@Messaging@A2B@@UAE@XZ
??1HttpEnvelope@Messaging@A2B@@UAE@XZ
?SetWebServiceMessage@WebServiceEnvelope@Messaging@A2B@@QAEPAVWebServiceMessage@23@PAV423@@Z
?SetSaxParserFactory@SoapEnvelope@Messaging@A2B@@QAEPAVSaxParserFactory@23@PAV423@@Z
?SetSoapAction@SoapEnvelope@Messaging@A2B@@QAEDPBD@Z
?ResetEncodedHeader@MimeEnvelope@Messaging@A2B@@QAEDI@Z

transports

?SetBufferReadData@Transport@Transports@A2B@@QAEEE@Z
?PutbackReadBuffer@Transport@Transports@A2B@@QAEDXZ

utils

??0VoidArray@Utils@A2B@@QAE@E@Z
??1VoidArray@Utils@A2B@@QAE@XZ
?AddEntry@VoidArray@Utils@A2B@@QAEDPAX@Z
?EntryAt@VoidArray@Utils@A2B@@QAEPAXI@Z

cmessaging

A2BMimeDecodeContentType
A2BMimeDecodeExtension

cutils

A2BLog

osal

A2BMutexDestroy
A2BThreadStop
A2BThreadSleep
A2BThreadIsActive
A2BThreadGetPriority
A2BThreadStart
A2BMutexUnlock
A2BMutexLock
A2BThreadDestroy
A2BThreadGetHandleSelf
A2BMutexConstruct
A2BThreadConstruct

msvcrt

??2@YAPAXI@Z
sprintf
_purecall
strstr
strncpy
free
_initterm
malloc
??3@YAXPAX@Z
_adjust_fdiv

kernel32

GetLastError
DisableThreadLibraryCalls

Exports

Exports

??0HttpBroker@Services@A2B@@QAE@PAVTransport@Transports@2@@Z
??0HttpBrokerSoapExtension@Services@A2B@@QAE@PAVSaxParserFactory@Messaging@2@@Z
??0HttpBrokerUrlExtension@Services@A2B@@QAE@XZ
??1HttpBroker@Services@A2B@@UAE@XZ
??1HttpBrokerSoapExtension@Services@A2B@@UAE@XZ
??1HttpBrokerUrlExtension@Services@A2B@@UAE@XZ
?AddExtension@HttpBroker@Services@A2B@@QAEDPAVHttpBrokerExtension@23@@Z
?AddInterceptor@HttpBroker@Services@A2B@@QAEDPAVServiceInterceptor@23@@Z
?BrokerAcceptTask@HttpBroker@Services@A2B@@KAKPAX@Z
?GetSaxParserFactory@HttpBrokerSoapExtension@Services@A2B@@QAEPAVSaxParserFactory@Messaging@3@XZ
?GetTransport@HttpBroker@Services@A2B@@QAEPAVTransport@Transports@3@XZ
?HandleClientRequest@HttpBroker@Services@A2B@@QAEDPAVTransport@Transports@3@PAUHttpLut@23@AAVVoidArray@Utils@3@2PAVException@Headers@Messaging@3@@Z
?IsMatch@HttpBrokerSoapExtension@Services@A2B@@UAEEPBDAAVTransport@Transports@3@AAVWebServiceMessage@Messaging@3@AAPAVWebServiceEnvelope@73@AAPAVBinding@73@AAPAD@Z
?IsMatch@HttpBrokerUrlExtension@Services@A2B@@UAEEPBDAAVTransport@Transports@3@AAVWebServiceMessage@Messaging@3@AAPAVWebServiceEnvelope@73@AAPAVBinding@73@AAPAD@Z
?Lock@HttpBroker@Services@A2B@@IAEDXZ
?SetLookupTable@HttpBroker@Services@A2B@@QAEPAUHttpLut@23@PAU423@@Z
?SetSaxParserFactory@HttpBrokerSoapExtension@Services@A2B@@QAEPAVSaxParserFactory@Messaging@3@PAV453@@Z
?SetTransport@HttpBroker@Services@A2B@@QAEPAVTransport@Transports@3@PAV453@@Z
?StartBroker@HttpBroker@Services@A2B@@QAEDE@Z
?StopBroker@HttpBroker@Services@A2B@@QAEDXZ
?Unlock@HttpBroker@Services@A2B@@IAEDXZ

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaaacb33572f420e7404ce273ef5105a

Headers

File Characteristics

Imports

messaging

transports

utils

cmessaging

cutils

osal

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 504B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 504B