eab2d226f3d7556a322fa921bd92019bc9b62246bdb32f20f1dc58be4926cb0a

General

Target

eab2d226f3d7556a322fa921bd92019bc9b62246bdb32f20f1dc58be4926cb0a
Size

10KB
MD5

edee35920ada4be27adc4a0378f8ac2e
SHA1

c876472a8d8810954c54be14be4323a916b9f638
SHA256

eab2d226f3d7556a322fa921bd92019bc9b62246bdb32f20f1dc58be4926cb0a
SHA512

e2edc8233479e9c1971fae48cf55c95e5d5be6fe293a572df9db6cfabf49622fe766c4ca1888d07df4a532d6785ce38e51e3693a87c1b31bd0f585524e297653
SSDEEP

96:YeC2x8AlCNMuKj3jisuXlMBJfYT+kapcqw5n3SlD0sgz6V7ARr9mOllyKReEf3XJ:oN11MBul4wxSRk5V9PljJf3XLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eab2d226f3d7556a322fa921bd92019bc9b62246bdb32f20f1dc58be4926cb0a

Files

eab2d226f3d7556a322fa921bd92019bc9b62246bdb32f20f1dc58be4926cb0a
.dll windows:6 windows x86 arch:x86

e65b42c85d76a57b2aea85515cbb7edf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_addr
WSAGetLastError
socket
send
recvfrom
ntohs
ntohl
htons
htonl
ioctlsocket
connect
closesocket

iphlpapi

GetBestRoute

msvcr120

_except_handler4_common
_onexit
__clean_type_info_names_internal
memset
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit

kernel32

GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
IsProcessorFeaturePresent

Exports

Exports

closenatpmp
getdefaultgateway
getnatpmprequesttimeout
initnatpmp
readnatpmpresponse
readnatpmpresponseorretry
sendnewportmappingrequest
sendpublicaddressrequest
strnatpmperr

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e65b42c85d76a57b2aea85515cbb7edf

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 860B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 444B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 860B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 444B