cc5e87bef1c4f23cb6288e7eaa995197

Sharing

Copy URL

Twitter E-mail

General

Target

cc5e87bef1c4f23cb6288e7eaa995197
Size

25KB
MD5

cc5e87bef1c4f23cb6288e7eaa995197
SHA1

beb2b42611b48dfa2391ae27594f4921890aa94a
SHA256

d4995c057635e5ae95d46de777da2d4e09d4b64530c7042faab62100b509aa17
SHA512

1375664da805502ef69b295dfe89a786bc9681367ecf8373f44a732e95e2e46cbeb74d1aa379d18dd385d1edea2ef4b050c9c24bfe7ca9ad863e1682d61b7cb5
SSDEEP

768:QwEmsFK7OoV/c5w5uD9I55k3oXM6cJ/G:3sMS92uYc6cJ/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc5e87bef1c4f23cb6288e7eaa995197

Files

cc5e87bef1c4f23cb6288e7eaa995197
.dll windows:4 windows x86 arch:x86

db3f5f9786d0d24eb12d84de0fac79d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
DeleteFileA
SetFileAttributesA
LockResource
lstrcatA
lstrcpynA
lstrlenA
GetVersion
OpenFile
Sleep
FreeLibrary
CreateThread
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
ReadFile
LoadLibraryA
EnterCriticalSection
SetLastError
GetFileSize
GetWindowsDirectoryA
GetEnvironmentVariableA
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
SetFilePointer
GetLastError
CreateProcessA
GetStartupInfoA
GetTickCount
FreeLibraryAndExitThread
ExitProcess
ExitThread
WaitForSingleObject
GetProcAddress
GetCurrentProcessId
lstrcpyA
FindResourceA
LoadResource
LeaveCriticalSection
SizeofResource

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

wsprintfA

ws2_32

closesocket
shutdown
__WSAFDIsSet
send
recv
connect
htons
accept
bind
htonl
getsockname
WSAGetLastError
getsockopt
select
listen
WSAStartup
socket
ioctlsocket
gethostbyname

shlwapi

StrToIntA
StrStrA

Exports

Exports

GetThreadBot

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db3f5f9786d0d24eb12d84de0fac79d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

ws2_32

shlwapi

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 15KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB