4d23486343d7ba40506173eb2fc0b5515695786cff3dee6d43d417aa2f8fe6df

Sharing

Copy URL Twitter E-mail

General

Target

4d23486343d7ba40506173eb2fc0b5515695786cff3dee6d43d417aa2f8fe6df
Size

164KB
MD5

b0ae07799a78262fe9ddb9a3c942f99c
SHA1

23b491a53de77ceb08f461431696b32bdc05c4f8
SHA256

4d23486343d7ba40506173eb2fc0b5515695786cff3dee6d43d417aa2f8fe6df
SHA512

ed156851bdabea9c8aa43f7e72eebb2ba20fa703abb3948487fbfdfdd11bdee253d30521b5832211bd946c1f492b4ef6b8048214bf474066d1c4a41992f8be8c
SSDEEP

3072:VM+DitaJRKUlhIsSqiEfRyhSS0A2gFzG+G/IH+YwQv7y4e91O:uCPKBqiEfES69FzGNQHKQv7yJ9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d23486343d7ba40506173eb2fc0b5515695786cff3dee6d43d417aa2f8fe6df

Files

4d23486343d7ba40506173eb2fc0b5515695786cff3dee6d43d417aa2f8fe6df
.dll windows:6 windows x86 arch:x86

4f85c3420085107bc20bb151fab72d2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

getaddrinfo
socket
shutdown
connect
ioctlsocket
getsockname
recvfrom
sendto
gethostname
WSAGetLastError
getnameinfo
WSAStartup
freeaddrinfo
__WSAFDIsSet
setsockopt
htons
htonl
closesocket
bind
ntohs
inet_ntoa
inet_ntop
select
ntohl
inet_addr
WSACleanup

iphlpapi

GetIpInterfaceEntry
InitializeIpInterfaceEntry
SetIpInterfaceEntry
GetAdaptersInfo
GetBestInterface

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
CreateEventA
ResetEvent
GetOverlappedResult
DeviceIoControl
GetLastError
CloseHandle
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
TerminateThread
GetLocalTime
FormatMessageA
CreateFileA
ReadFile
WriteFile
UnhandledExceptionFilter

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExA

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
strstr
memcmp
memset
memcpy

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
strftime
_localtime64
clock

api-ms-win-crt-string-l1-1-0

isspace
strncmp
strcmp
strlen
_strdup
strncpy
strpbrk
strcpy
strtok

api-ms-win-crt-heap-l1-1-0

realloc
free
calloc
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_cexit
_errno
_exit
strerror
exit
system
_execute_onexit_table
_initterm
_initialize_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong
_byteswap_ushort

api-ms-win-crt-convert-l1-1-0

strtoul
atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsscanf
fflush
fgets
fclose
__stdio_common_vfprintf
fopen
__acrt_iob_func

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

edge_main

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f85c3420085107bc20bb151fab72d2f

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

advapi32

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 40KB - Virtual size: 40KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 40KB - Virtual size: 40KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB