UDP Unicorn[.]exe

Resubmissions

26-07-2024 12:53

240726-p43agssdrg 3

26-07-2024 12:49

240726-p2bpraydmr 3

Sharing

Copy URL

Twitter E-mail

General

Target

UDP Unicorn.exe
Size

407KB
MD5

26a781f1b4d7a9ba041a4da1cf90e2c7
SHA1

24d2cbaf45b682034a4187a5d6821d6f430c545c
SHA256

216b185fc945f2c612322061844f5428606891a2ab180be5ebacca1ff8360f65
SHA512

6afd48ec7dd96a4e4723418f03d7bfa154d4f9a10da6ab527c85cb5817254ce6099fbb3f927b0c4c69dad2d87572d1bd28c57cbcf8739e2e01b93d4f8d91b44c
SSDEEP

12288:CYX4ned15Ccn1IoufyEux9tPcOwyxZm68rjC6b/1MSPo1CCQKtv3C5DhQirA4W4:CYX4ned15Ccn1IoufyEux9tPcOwyxZml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UDP Unicorn.exe

Files

UDP Unicorn.exe
.exe windows:4 windows x86 arch:x86

15dc8df4a93a88b3adeb3176adcffeeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControlsEx

comdlg32

ChooseColorA

gdi32

CreateFontA
CreateSolidBrush
DeleteObject
GetDeviceCaps
GetStockObject
SetBkMode

iphlpapi

SendARP

kernel32

AddAtomA
CloseHandle
CreateDirectoryA
CreateEventA
CreateThread
DeleteFileA
ExitProcess
ExitThread
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetCurrentDirectoryA
GetFileAttributesA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
LoadLibraryA
MulDiv
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fflush
fgets
fopen
fprintf
free
fscanf
fwrite
malloc
memcpy
memset
rand
signal
sprintf
srand
sscanf
strcat
strcmp
strcpy

shell32

ShellExecuteA
Shell_NotifyIconA

user32

AppendMenuA
CheckMenuItem
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowA
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetMenu
GetMenuItemInfoA
GetMessageA
GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsDlgButtonChecked
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
MessageBoxA
RegisterClassExA
ReleaseDC
SendMessageA
SetClassLongA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenuEx
TranslateMessage
UpdateWindow
wsprintfA

winmm

mciSendStringA

ws2_32

WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAStartup
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
htons
inet_addr
inet_ntoa
ntohs
recv
select
send
sendto
socket

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 696B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

15dc8df4a93a88b3adeb3176adcffeeb

Headers

File Characteristics

Imports

comctl32

comdlg32

gdi32

iphlpapi

kernel32

msvcrt

shell32

user32

winmm

ws2_32

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 696B

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 365KB - Virtual size: 364KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 696B

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 365KB - Virtual size: 364KB