dffa19338f96f81780b436ce680013f3

General

Target

dffa19338f96f81780b436ce680013f3
Size

618KB
MD5

dffa19338f96f81780b436ce680013f3
SHA1

3356b29f6effb39c81043e5e0cfefe7982dc70a5
SHA256

98ca9c01a687e9931287278272930e4c70432d184aecfff0e7de219dd2bf87ee
SHA512

c910d90deeeba0447185b914975f093d940d6d0a4dc5a5fbe03b10a11dcb821ff6bb03fda06aa276defab6d76eab9b3e55b483f5c36ca596afa835ffb6769522
SSDEEP

6144:kqcZ9OmgpTa/u2Q5QakYmRGb9Ckwq8UD8vVoiXKJloG+LK00ENPK:kq6IW/uEakdgDwY8vVomIA/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffa19338f96f81780b436ce680013f3

Files

dffa19338f96f81780b436ce680013f3
.exe windows:4 windows x86 arch:x86

1680e6adfc0c333170df70cb301627f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAHtons
getsockname
WSAAccept
WSAEnumNetworkEvents
accept
WSASendDisconnect

gdi32

OffsetRgn
RestoreDC

kernel32

VirtualUnlock
lstrcmpA
lstrcatW
ExitProcess
EnumSystemCodePagesW
GetSystemTimeAdjustment
OutputDebugStringW
GlobalAddAtomA
GetStartupInfoA
LocalLock
SetupComm
SetProcessWorkingSetSize
EnumDateFormatsW
CompareStringW
LocalAlloc
GetOverlappedResult
_hread
DeleteCriticalSection
EnumSystemCodePagesA
EnumResourceLanguagesW
GetEnvironmentVariableW
LoadLibraryExW
GetLocaleInfoW

user32

GetForegroundWindow
GetClipboardSequenceNumber
GetTopWindow
UnregisterHotKey
IsZoomed
UpdateWindow
SetWindowTextA
SetRect
GetWindowContextHelpId

comctl32

ImageList_Merge
ImageList_Replace

oleaut32

LoadTypeLibEx
QueryPathOfRegTypeLi
SetErrorInfo
SafeArrayPutElement
SafeArrayRedim
SafeArrayCreate

msvcrt

isdigit
ctime
_errno
vsprintf
memmove
fgetwc
realloc
mbstowcs
wcstok
perror
bsearch
fread
fclose
wcstol
fwrite
_exit
wcscspn
wcstombs
_wmakepath
strstr
sscanf

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1680e6adfc0c333170df70cb301627f8

Headers

File Characteristics

Imports

ws2_32

gdi32

kernel32

user32

comctl32

oleaut32

msvcrt

Sections

.text Size: 311KB - Virtual size: 310KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 286KB - Virtual size: 286KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 311KB - Virtual size: 310KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 286KB - Virtual size: 286KB

.rsrc
Size: 16KB - Virtual size: 16KB