b44a5b0a1884359164dbbfddcbd80d65d6109054f87bd848d8e57c5a733f6ca1

Sharing

Copy URL Twitter E-mail

General

Target

b44a5b0a1884359164dbbfddcbd80d65d6109054f87bd848d8e57c5a733f6ca1
Size

46KB
MD5

e90768f4eba69747e904d707fbaaa5ae
SHA1

72dd99c411acd6822801866b0b5dfa4941eb0f63
SHA256

b44a5b0a1884359164dbbfddcbd80d65d6109054f87bd848d8e57c5a733f6ca1
SHA512

efcd5cff668b5384c6d74a93fd84175971bd18531056a5dc859fc9bb5e4fb453c20446bd5ba80335b2b512e9ab123e3b3757801e7eb9739342c5f7e8e9f3a2fe
SSDEEP

768:muywzQxeL1kkidp8pyfkoqhHNOVpZS4q3O6w0:/Qxssp8pyfXqhkVq4b6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44a5b0a1884359164dbbfddcbd80d65d6109054f87bd848d8e57c5a733f6ca1

Files

b44a5b0a1884359164dbbfddcbd80d65d6109054f87bd848d8e57c5a733f6ca1
.dll windows:4 windows x86 arch:x86

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetTickCount
Sleep
IsBadReadPtr
GetProfileStringA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

ws2_32

inet_addr
htons
gethostbyname
shutdown
WSAStartup
select

msvcrt

strncpy
fwrite
sprintf
rand
_access
time
fread
ftell
fseek
fclose
fgets
fopen
_purecall
_iob
free
malloc
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
wcstombs
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
localtime
_beginthreadex
printf
srand
_strlwr

msvcp60

??1runtime_error@std@@UAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Doraise@runtime_error@std@@MBEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?what@runtime_error@std@@UBEPBDXZ

Exports

Exports

ServiceMain
Start
strrev

Sections

.scode
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb60241a2b71c7f54b3022f86c3bb2fa

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

msvcp60

Exports

Exports

Sections

.scode Size: 18KB - Virtual size: 18KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.scode
Size: 18KB - Virtual size: 18KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB