d47b083873ddb98c28519450a5a15a8521e7543e036c2c63f9dc4c8df35cfdcfN

Sharing

Copy URL

Twitter E-mail

General

Target

d47b083873ddb98c28519450a5a15a8521e7543e036c2c63f9dc4c8df35cfdcfN
Size

33KB
MD5

fb5a6be4ca8a0791424b9cf66faebde0
SHA1

1fec799857a49ab3622e2b29454de817f35a63f9
SHA256

d47b083873ddb98c28519450a5a15a8521e7543e036c2c63f9dc4c8df35cfdcf
SHA512

5ce0feea8fd4baebc99b78c162eeecec630edf7aa364d81577ae531b7070ce180fcccb0747092c1f600f78bbae3747fcf6ea9eaadeafa8886665b20b69827b75
SSDEEP

768:ZuJJtg5HPfxiT9724lmnL7QGPL4vzZq2o9W7GsxBbPr:etg5HnYTw4lmnL8GCq2iW7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47b083873ddb98c28519450a5a15a8521e7543e036c2c63f9dc4c8df35cfdcfN

Files

d47b083873ddb98c28519450a5a15a8521e7543e036c2c63f9dc4c8df35cfdcfN
.exe windows:6 windows x86 arch:x86

932e47c1f5df68e5a4f02107ce0ce056

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\Win32\Release\iproxy.pdb

Imports

ws2_32

WSAAddressToStringA
send
socket
connect
WSAStartup
getsockopt
htonl
htons
ioctlsocket
listen
select
accept
bind
recv
setsockopt
closesocket
WSAGetLastError

kernel32

GetModuleHandleW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
CreateThread
CloseHandle
WaitForSingleObject
ExitProcess
UnhandledExceptionFilter

getopt

optarg_a
optind
getopt_long_a

usbmuxd

usbmuxd_connect
usbmuxd_get_device_list
usbmuxd_get_device
libusbmuxd_set_debug_level

vcruntime140

__current_exception_context
_except_handler4_common
strrchr
__current_exception
memset

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_initialize_narrow_environment
_seh_filter_exe
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
perror
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
strerror
__p___argc
_errno

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

_strdup

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�x��u
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

932e47c1f5df68e5a4f02107ce0ce056

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

getopt

usbmuxd

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 936B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 864B

�x���u Size: 16KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 936B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 864B

�x��u
Size: 16KB - Virtual size: 20KB