7cef7ec81a1fcca91272ee793dfb7a2c81921823971527cf703b350a71edc304

General

Target

7cef7ec81a1fcca91272ee793dfb7a2c81921823971527cf703b350a71edc304
Size

88KB
MD5

dbfa94c5349927a424fcbe33bc0c5a33
SHA1

b44cec202d9402f89547b9faad70662abc75031d
SHA256

7cef7ec81a1fcca91272ee793dfb7a2c81921823971527cf703b350a71edc304
SHA512

6ab023f217d51eeb21b9346bae7ce404e4ab74507f1acec87be4a392abedcd31250eed8067044d8a28bfc4091ce5da11d6254e7251df2ecb68f7187d08299d49
SSDEEP

1536:OqEC3sJiiPPF0SWTnT/rnToIfhIOuMoi:FEC3svXqnLTBfLuMoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cef7ec81a1fcca91272ee793dfb7a2c81921823971527cf703b350a71edc304

Files

7cef7ec81a1fcca91272ee793dfb7a2c81921823971527cf703b350a71edc304
.exe windows:4 windows x86 arch:x86

fd59a0812a179ac74590c50553894648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
WritePrivateProfileStringA
SetFilePointer
CopyFileA
DeleteFileA
CreateDirectoryA
GetLastError
CreateMutexA
SetLastError
SetCurrentDirectoryA
GetModuleFileNameA
MoveFileA
SetFileTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetFileAttributesA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetStdHandle
GetStringTypeW

ws2_32

closesocket
send
recv
inet_addr
gethostbyname
WSASetLastError
htons
connect
WSAStartup
socket

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd59a0812a179ac74590c50553894648

Headers

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 848B

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 848B