9502a4b23e87b99e45196fbf418ac82d34cba6f99a8e37482ec9a35f80eaee69

Sharing

Copy URL Twitter E-mail

General

Target

9502a4b23e87b99e45196fbf418ac82d34cba6f99a8e37482ec9a35f80eaee69
Size

46KB
MD5

34c001e18369f4b2ffa34d3e988e5111
SHA1

e897132e041c76c35f7d8c33476ad5c776b00c90
SHA256

9502a4b23e87b99e45196fbf418ac82d34cba6f99a8e37482ec9a35f80eaee69
SHA512

5f2ba144a1a5a2afa663894a582f75baaa8b5d53a5b6445e60fe777fcf42d262bd32c7151eb92caf6efc58465a6693304083f22d96352e3c9b4e73faa69f6497
SSDEEP

768:muywzQxeL1kkidp8pyfkoqhHNOVpZSLq3O6w0:/Qxssp8pyfXqhkVqLb6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9502a4b23e87b99e45196fbf418ac82d34cba6f99a8e37482ec9a35f80eaee69

Files

9502a4b23e87b99e45196fbf418ac82d34cba6f99a8e37482ec9a35f80eaee69
.dll windows:4 windows x86 arch:x86

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetTickCount
Sleep
IsBadReadPtr
GetProfileStringA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

ws2_32

inet_addr
htons
gethostbyname
shutdown
WSAStartup
select

msvcrt

strncpy
fwrite
sprintf
rand
_access
time
fread
ftell
fseek
fclose
fgets
fopen
_purecall
_iob
free
malloc
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
wcstombs
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
localtime
_beginthreadex
printf
srand
_strlwr

msvcp60

??1runtime_error@std@@UAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Doraise@runtime_error@std@@MBEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?what@runtime_error@std@@UBEPBDXZ

Exports

Exports

ServiceMain
Start
strrev

Sections

.scode
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

msvcp60

Exports

Exports

Sections

.scode Size: 18KB - Virtual size: 18KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.scode
Size: 18KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB