0423e47356a2596dfae77af5801642b4a84fb9b64170a8eea088a6c841e61464

Sharing

Copy URL

Twitter E-mail

General

Target

0423e47356a2596dfae77af5801642b4a84fb9b64170a8eea088a6c841e61464
Size

49KB
MD5

6d37723b9ddb09f6a8feafaf9818d799
SHA1

edbf6e838e7c1699fa4dc470e0d4da383ce92b83
SHA256

0423e47356a2596dfae77af5801642b4a84fb9b64170a8eea088a6c841e61464
SHA512

d4342a4144da7636410cdf2b5026a35f160d55fe8038ee49559f6df920b44954d85fa847389f0684b145160d5da2df7fd825c7af1c3edfc9a7815d3e18e27eef
SSDEEP

768:YGBMsrNYPkyrJIcebtVTSpiQL4A07qpFSg568M:F7yPkq1ebtVTSpiQt+qqgM8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0423e47356a2596dfae77af5801642b4a84fb9b64170a8eea088a6c841e61464

Files

0423e47356a2596dfae77af5801642b4a84fb9b64170a8eea088a6c841e61464
.dll windows:4 windows x86 arch:x86

86380a8c321ce2879e9dea7aaad8200a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
DeviceIoControl
GetPrivateProfileSectionA
ReadFile
CreateFileA
WriteFile
CloseHandle
GetOEMCP
GetCommandLineA
GetProcAddress
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetVersion
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
SetFilePointer

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumKeyExA

Exports

Exports

SEAMAC_ClearCommBreak
SEAMAC_GetBufferCount
SEAMAC_GetData
SEAMAC_GetModemControl
SEAMAC_GetPortInfo
SEAMAC_GetPortState
SEAMAC_GetSystemInfo
SEAMAC_OvrlGetData
SEAMAC_OvrlPortOpen
SEAMAC_OvrlPutData
SEAMAC_PortClose
SEAMAC_PortOpen
SEAMAC_PutData
SEAMAC_ResetBuffers
SEAMAC_SetCommBreak
SEAMAC_SetModemControl
SEAMAC_SetNodeAddress
SEAMAC_SetPortState
SEAMAC_TransmitCommChar

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MYSHARE
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86380a8c321ce2879e9dea7aaad8200a

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 19KB

.idata Size: 2KB - Virtual size: 1KB

.MYSHARE Size: 512B - Virtual size: 8B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 19KB

.idata
Size: 2KB - Virtual size: 1KB

.MYSHARE
Size: 512B - Virtual size: 8B

.reloc
Size: 3KB - Virtual size: 3KB