ebf247c5075205a014ff38acd5dc7f3d899432df2b9766e403d18c934d41ddfc

Sharing

Copy URL Twitter E-mail

General

Target

ebf247c5075205a014ff38acd5dc7f3d899432df2b9766e403d18c934d41ddfc
Size

65KB
MD5

cbdea3064a6c9b5b6528c820a830f787
SHA1

693d59a9d01bb25212ba7bd858cfa65484fdc206
SHA256

ebf247c5075205a014ff38acd5dc7f3d899432df2b9766e403d18c934d41ddfc
SHA512

1ee17637766919b066af29fab9a75b5c0cfa14b267892359805c1fd89b2d9146ae70673149d1f6a5b4c9c4de00f50d79625af0540e9cb8309602278835a85eb0
SSDEEP

1536:PN658gl5dqDWAebu4eUaPqz5uFetdcpUavsO5EyM54glkn:858Gzh1bLmI5uFm5avsO5O548kn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf247c5075205a014ff38acd5dc7f3d899432df2b9766e403d18c934d41ddfc

Files

ebf247c5075205a014ff38acd5dc7f3d899432df2b9766e403d18c934d41ddfc
.dll windows:5 windows x64 arch:x64

be354ec19d333684ae48a90bb4faa63a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

htons
GetAddrInfoW
FreeAddrInfoW
WSAStartup

kernel32

GetCurrentProcess
GetProcAddress
GetModuleHandleW
HeapFree
HeapAlloc
GetLastError
CloseHandle
HeapReAlloc
LoadLibraryA
GetComputerNameW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
ExitProcess
SetHandleCount
GetStdHandle
FlushFileBuffers
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
GetFileType

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Exports

Exports

LogMessageW
TixHandlerW
Tix_Validate_Host_AddressW
Tix_Validate_Port_NumberW

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be354ec19d333684ae48a90bb4faa63a

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 37KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 764B

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 37KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 764B