85ec4e638591c4e10237a78f2a581fd7facefd1e6ce9caee5338c41c3a35540b

Sharing

Copy URL Twitter E-mail

General

Target

85ec4e638591c4e10237a78f2a581fd7facefd1e6ce9caee5338c41c3a35540b
Size

46KB
MD5

567721f8186ed4246f6c4e41cd41d822
SHA1

be87f137e67afd35ebb4dbeed3f54beb4049bc52
SHA256

85ec4e638591c4e10237a78f2a581fd7facefd1e6ce9caee5338c41c3a35540b
SHA512

dbc54d329f38958c41d52cf641d9945ea81a49b0c53f75126070fe628c7bc54184db7803bdcf119a8edde7d917ca4260747cce3379dac21c115a93a508d0553d
SSDEEP

768:muywzQxeL1kkidp8pyfkoqhHNOVpZSeq3O6w0:/Qxssp8pyfXqhkVqeb6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85ec4e638591c4e10237a78f2a581fd7facefd1e6ce9caee5338c41c3a35540b

Files

85ec4e638591c4e10237a78f2a581fd7facefd1e6ce9caee5338c41c3a35540b
.dll windows:4 windows x86 arch:x86

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetTickCount
Sleep
IsBadReadPtr
GetProfileStringA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

ws2_32

inet_addr
htons
gethostbyname
shutdown
WSAStartup
select

msvcrt

strncpy
fwrite
sprintf
rand
_access
time
fread
ftell
fseek
fclose
fgets
fopen
_purecall
_iob
free
malloc
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
wcstombs
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
localtime
_beginthreadex
printf
srand
_strlwr

msvcp60

??1runtime_error@std@@UAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Doraise@runtime_error@std@@MBEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?what@runtime_error@std@@UBEPBDXZ

Exports

Exports

ServiceMain
Start
strrev

Sections

.scode
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

msvcp60

Exports

Exports

Sections

.scode Size: 18KB - Virtual size: 18KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.scode
Size: 18KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB