ed9745caf236d9ff87f5470d9513b85609bed7c6aff47381b5a3b7f37c880c02

Sharing

Copy URL

Twitter E-mail

General

Target

ed9745caf236d9ff87f5470d9513b85609bed7c6aff47381b5a3b7f37c880c02
Size

1024KB
MD5

7c93c133e9c63d4fd83525fdd542f43f
SHA1

d3075db481ee32925f28b28b0035b24099031bff
SHA256

ed9745caf236d9ff87f5470d9513b85609bed7c6aff47381b5a3b7f37c880c02
SHA512

78eee6d218ec658bffa10c79735ebb46cfea87addff05676e8b0629df23cfe188b36447ee31396574cd1dd96389b88b1a70935c489ccd63b7235736f3c88bdb6
SSDEEP

24576:tSRl3epBk79liPCRlSZvC8eW/FXVdTGMzH3E3ZgSF:tSRlupO2nXHTG63E3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed9745caf236d9ff87f5470d9513b85609bed7c6aff47381b5a3b7f37c880c02

Files

ed9745caf236d9ff87f5470d9513b85609bed7c6aff47381b5a3b7f37c880c02
.exe windows:4 windows x86 arch:x86

c62963330ff94eab24ed82dee2c1f54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

sdl

SDL_CDClose
SDL_CDEject
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_CloseAudio
SDL_Delay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GetAppState
SDL_GetError
SDL_GetGammaRamp
SDL_GetRelativeMouseState
SDL_GetTicks
SDL_GetWMInfo
SDL_Init
SDL_InitSubSystem
SDL_Linked_Version
SDL_LockAudio
SDL_OpenAudio
SDL_PauseAudio
SDL_PollEvent
SDL_Quit
SDL_QuitSubSystem
SDL_SetEventFilter
SDL_SetGammaRamp
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_ShowCursor
SDL_UnlockAudio
SDL_WM_GrabInput
SDL_WM_SetCaption

kernel32

ExitProcess
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalLock
GlobalSize
GlobalUnlock
LoadLibraryA
SetUnhandledExceptionFilter

msvcrt

_close
_dup
_lseek
_open
_putch
_read
_stricmp
_strnicmp
_unlink
_write
__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_getch
_iob
_kbhit
_mkdir
_setjmp
_setmode
_vsnprintf
atan
atan2
atexit
atof
atoi
ceil
exit
exp
fclose
fflush
fgetc
floor
fopen
fprintf
free
freopen
isspace
localtime
log
longjmp
malloc
memcpy
memmove
memset
pow
rand
remove
setbuf
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strftime
strncmp
strncpy
strrchr
strstr
strtok
strtol
tan
time
tolower
toupper

user32

CloseClipboard
GetClipboardData
LoadIconA
MessageBoxA
OpenClipboard
SetClassLongA

wsock32

WSACleanup
WSAGetLastError
WSAStartup
bind
closesocket
gethostbyname
getsockname
htons
ioctlsocket
ntohs
recvfrom
sendto
setsockopt
socket

Sections

.text
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 45.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c62963330ff94eab24ed82dee2c1f54b

Headers

File Characteristics

Imports

sdl

kernel32

msvcrt

user32

wsock32

Sections

.text Size: 957KB - Virtual size: 956KB

.data Size: 61KB - Virtual size: 61KB

.bss Size: - Virtual size: 45.6MB

.idata Size: 4KB - Virtual size: 4KB

.text
Size: 957KB - Virtual size: 956KB

.data
Size: 61KB - Virtual size: 61KB

.bss
Size: - Virtual size: 45.6MB

.idata
Size: 4KB - Virtual size: 4KB