a83251423090b4874308f04b1ff339ee759fdcc9ef7c29a26276000d68d7ea11

Sharing

Copy URL Twitter E-mail

General

Target

a83251423090b4874308f04b1ff339ee759fdcc9ef7c29a26276000d68d7ea11
Size

106KB
MD5

d57eaf8829a4554953e56154e23651ee
SHA1

41afe4c662c01f822f95af58bdc8744806734921
SHA256

a83251423090b4874308f04b1ff339ee759fdcc9ef7c29a26276000d68d7ea11
SHA512

7479bcdacad57e66e5bed548ec8c97734bbe36bf549003cf140b9a07261e70b7af9f542c1afb5111bbadd6d75c3c5d5ca7eee5e92ed7facf804f9532e74a9528
SSDEEP

1536:GEYW63cTZFqjLE8TdSe9Gp9e7+4vO+rM94gqzV2zL7IHMWl6xroAgw:gIow8xGpYf7zvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a83251423090b4874308f04b1ff339ee759fdcc9ef7c29a26276000d68d7ea11

Files

a83251423090b4874308f04b1ff339ee759fdcc9ef7c29a26276000d68d7ea11
.exe windows:4 windows x86 arch:x86

4ef039d33d30bf57a9b2ff9ac543867f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libortp-9

ortp_client_pipe_close
ortp_client_pipe_connect
ortp_init
ortp_pipe_read
ortp_pipe_write

advapi32

GetUserNameA

kernel32

CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_strdup
_stricoll
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_onexit
_setmode
_snprintf
abort
atexit
calloc
exit
fflush
fprintf
free
fwrite
isspace
malloc
mbstowcs
memcpy
printf
realloc
setlocale
signal
sscanf
strcmp
strcoll
strerror
strlen
strncpy
strstr
tolower
vfprintf
wcstombs

user32

WaitForInputIdle

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 124B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/89
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ef039d33d30bf57a9b2ff9ac543867f

Headers

File Characteristics

Imports

libortp-9

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 124B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 480B

/29 Size: 30KB - Virtual size: 29KB

/41 Size: 6KB - Virtual size: 6KB

/55 Size: 6KB - Virtual size: 5KB

/67 Size: 512B - Virtual size: 165B

/78 Size: 11KB - Virtual size: 11KB

/89 Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 124B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 480B

/29
Size: 30KB - Virtual size: 29KB

/41
Size: 6KB - Virtual size: 6KB

/55
Size: 6KB - Virtual size: 5KB

/67
Size: 512B - Virtual size: 165B

/78
Size: 11KB - Virtual size: 11KB

/89
Size: 2KB - Virtual size: 1KB