005f2c346278c9342764328fe154adb0N

General

Target

005f2c346278c9342764328fe154adb0N
Size

28KB
MD5

005f2c346278c9342764328fe154adb0
SHA1

f30c5cabafd1e4f39300fd15c239310c6b581c39
SHA256

853abf187c51b085551a892ee2f6670b5e4ea94d79cbea48d27f09492a9e3ad0
SHA512

dc86f1b09f8157022375485992b9b408cbbe3c2925e4d763d1b147a8dcfa5de05596f30b2c03790095905d475c6eecee38a04a8a25a062767c9452020e741ff5
SSDEEP

192:yZ/3L70pHQiUB8u+XS3iwEJhFyNGMd8KF8Kcy2LF54u8LmW7:SspH6Ua2cGMd8q8Zy2LF5CiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005f2c346278c9342764328fe154adb0N

Files

005f2c346278c9342764328fe154adb0N
.dll windows:4 windows x86 arch:x86

c4936b69d07a72f32327dcdd85a9d00d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord3147
ord3811
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1116
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord3337
ord4274

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
fprintf
vsprintf
fclose
ftell
fseek
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
time
__CxxFrameHandler
_snprintf
sprintf
fopen
atoi

kernel32

PurgeComm
SleepEx
ReadFile
ClearCommError
WriteFile
WaitForSingleObject
GetOverlappedResult
CreateFileA
GetCommState
SetCommTimeouts
CreateEventA
SetCommState
SetupComm
GetLastError
CloseHandle
GetPrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
LocalFree
LocalAlloc
GetTickCount

user32

TranslateMessage
DispatchMessageA
wsprintfA
PeekMessageA

Exports

Exports

Close
FGetState
GetTelState
GetVocState
Open
SetVocToPC
SetVocToTel

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4936b69d07a72f32327dcdd85a9d00d

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 824B

.reloc Size: 4KB - Virtual size: 814B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 824B

.reloc
Size: 4KB - Virtual size: 814B