7de0e87f3a157921f29a68bb242ee95d75b2be4e9de02df711cb1f00558a9b52

Sharing

Copy URL Twitter E-mail

General

Target

7de0e87f3a157921f29a68bb242ee95d75b2be4e9de02df711cb1f00558a9b52
Size

628KB
MD5

3a9db4a877b449614304fa697f162ca7
SHA1

c98804769541a202f20a7af38db6489f930c54ce
SHA256

7de0e87f3a157921f29a68bb242ee95d75b2be4e9de02df711cb1f00558a9b52
SHA512

f0ca32ec7b70977923d2f47c599ca7dae2179f6bf38587010505e89613781cd4549ead0dceab92fd1cd31220c6d79292d39eb8d926f57fe29162465806c38058
SSDEEP

6144:+UEdZxRNd7kJYlUrX+Dur9wILyPPHBRoMv:+USZxRNd7kJYlUrX+DurWkKPHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7de0e87f3a157921f29a68bb242ee95d75b2be4e9de02df711cb1f00558a9b52

Files

7de0e87f3a157921f29a68bb242ee95d75b2be4e9de02df711cb1f00558a9b52
.exe windows:5 windows x86 arch:x86

d3df15bdf07b79d036fe88701201c0d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAIoctl
connect
WSAStartup
select
htons
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send

kernel32

WriteConsoleW
SetStdHandle
GetStringTypeW
HeapReAlloc
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualFree
VirtualAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapCreate
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
CreateEventA
GetLastError
CloseHandle
GetCurrentThreadId
LCMapStringW
WideCharToMultiByte
lstrlenW
InterlockedExchange
ResetEvent
CreateEventW
CancelIo
GetThreadContext
SetThreadContext
OpenProcess
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VirtualAllocEx
ResumeThread
MoveFileExA
SetErrorMode
GetTickCount
GetConsoleWindow
Process32FirstW
GetModuleFileNameA
Process32NextW
GetCurrentDirectoryA
CreateToolhelp32Snapshot
GetUserDefaultUILanguage
CreateFileW
GetTickCount64
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryW
FlushFileBuffers
SetLastError
CreateThread
HeapSize
ExitThread
DecodePointer
EncodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineW
HeapSetInformation
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

ShowWindow
PostThreadMessageA
GetInputState

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyW
RegQueryValueExW

winmm

timeGetTime

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3df15bdf07b79d036fe88701201c0d2

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

winmm

Sections

.text Size: 534KB - Virtual size: 533KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 7KB - Virtual size: 22KB

.rsrc Size: 53KB - Virtual size: 53KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 534KB - Virtual size: 533KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 7KB - Virtual size: 22KB

.rsrc
Size: 53KB - Virtual size: 53KB

.reloc
Size: 10KB - Virtual size: 10KB