a484d264916bfdd57631f15e987d8ddaae98daac5daf62a70081d12ab4fec533

Sharing

Copy URL

Twitter E-mail

General

Target

a484d264916bfdd57631f15e987d8ddaae98daac5daf62a70081d12ab4fec533
Size

46KB
MD5

dbad6b495cd89250fa8570859bfe4dcd
SHA1

1c70ccead809c792b35780d831e7ce123eaf0f68
SHA256

a484d264916bfdd57631f15e987d8ddaae98daac5daf62a70081d12ab4fec533
SHA512

642b9fb58f0b7de193fe7a7cb6874b3f375c79640bed33cb9b3cda1f780c56d081449899cf4e433c8c5a15a9546bb95d84e4df363479bbc33942ce987c901d5e
SSDEEP

768:muywzQxeL1kkidp8pyfkoqhHNOVpZSAq3O6w0:/Qxssp8pyfXqhkVqAb6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a484d264916bfdd57631f15e987d8ddaae98daac5daf62a70081d12ab4fec533

Files

a484d264916bfdd57631f15e987d8ddaae98daac5daf62a70081d12ab4fec533
.dll windows:4 windows x86 arch:x86

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetTickCount
Sleep
IsBadReadPtr
GetProfileStringA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

ws2_32

inet_addr
htons
gethostbyname
shutdown
WSAStartup
select

msvcrt

strncpy
fwrite
sprintf
rand
_access
time
fread
ftell
fseek
fclose
fgets
fopen
_purecall
_iob
free
malloc
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
wcstombs
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
localtime
_beginthreadex
printf
srand
_strlwr

msvcp60

??1runtime_error@std@@UAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Doraise@runtime_error@std@@MBEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?what@runtime_error@std@@UBEPBDXZ

Exports

Exports

ServiceMain
Start
strrev

Sections

.scode
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

msvcp60

Exports

Exports

Sections

.scode Size: 18KB - Virtual size: 18KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.scode
Size: 18KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB