43d1029a70115a476ddd1d30ebd817d928aa27f2be80dbdad338a77089e97322

Sharing

Copy URL Twitter E-mail

General

Target

43d1029a70115a476ddd1d30ebd817d928aa27f2be80dbdad338a77089e97322
Size

111KB
MD5

54a08eb746dd38a0df75248cdfaf4964
SHA1

109236c9364788c9b9ed9a89663ad61dce2ed3dd
SHA256

43d1029a70115a476ddd1d30ebd817d928aa27f2be80dbdad338a77089e97322
SHA512

832696f7c1f4211d4bfe8477514862873b53074c60a6ef1623223e984340a4d92a126f96af080a74df862053fdcb47f6f5e82b9eda5bb4292fa60a37e7c620a8
SSDEEP

3072:vsfNy6RGoq/5BQKngSJJ7AySHwunmsjjAlpe/MxZM:WNlu5aVSkyQqnbM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d1029a70115a476ddd1d30ebd817d928aa27f2be80dbdad338a77089e97322

Files

43d1029a70115a476ddd1d30ebd817d928aa27f2be80dbdad338a77089e97322
.exe windows:6 windows x86 arch:x86

dc4c8b33f9c19c0c503d3ff7d01e3ae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\admin\source\repos\vt-test\Release\vt-test.pdb

Imports

ws2_32

ioctlsocket
closesocket
select
shutdown
getaddrinfo
WSAStartup
send
socket
connect
recv
getsockopt
freeaddrinfo
WSAGetLastError

secur32

DeleteSecurityContext
DecryptMessage
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesW
FreeContextBuffer
AcquireCredentialsHandleA
EncryptMessage
ApplyControlToken

kernel32

EncodePointer
WriteConsoleW
CreateFileW
CloseHandle
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetProcessHeap
LCMapStringW
CompareStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStringTypeW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc4c8b33f9c19c0c503d3ff7d01e3ae0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

secur32

kernel32

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB