574ba01bce1d431a281129c27b2fd089bcadb8981ed10ca568d9cb46850591e4

Sharing

Copy URL Twitter E-mail

General

Target

574ba01bce1d431a281129c27b2fd089bcadb8981ed10ca568d9cb46850591e4
Size

46KB
MD5

23154aa29d8d39b21cd30142bd086c68
SHA1

40aa890673c37e017914bacb972c768779450f4a
SHA256

574ba01bce1d431a281129c27b2fd089bcadb8981ed10ca568d9cb46850591e4
SHA512

1e75f5684150c1ef4ce4109c3773597e801c61a3428900bbec843b654ee177f6a6f3b25c59cf96d305e8d831014ac98aa207e7bbeb02c90b9a9d4ff0ff9ac3c8
SSDEEP

768:muywzQxeL1kkidp8pyfkoqhHNOVpZSuq3O6w0:/Qxssp8pyfXqhkVqub6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574ba01bce1d431a281129c27b2fd089bcadb8981ed10ca568d9cb46850591e4

Files

574ba01bce1d431a281129c27b2fd089bcadb8981ed10ca568d9cb46850591e4
.dll windows:4 windows x86 arch:x86

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetTickCount
Sleep
IsBadReadPtr
GetProfileStringA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

ws2_32

inet_addr
htons
gethostbyname
shutdown
WSAStartup
select

msvcrt

strncpy
fwrite
sprintf
rand
_access
time
fread
ftell
fseek
fclose
fgets
fopen
_purecall
_iob
free
malloc
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
wcstombs
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
localtime
_beginthreadex
printf
srand
_strlwr

msvcp60

??1runtime_error@std@@UAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Doraise@runtime_error@std@@MBEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?what@runtime_error@std@@UBEPBDXZ

Exports

Exports

ServiceMain
Start
strrev

Sections

.scode
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

msvcp60

Exports

Exports

Sections

.scode Size: 18KB - Virtual size: 18KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.scode
Size: 18KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB