5cc9d83a757fb8062f3b0cc717a45fa11f8b959210799784aa4d51f2443ee3a3N

Sharing

Copy URL Twitter E-mail

General

Target

5cc9d83a757fb8062f3b0cc717a45fa11f8b959210799784aa4d51f2443ee3a3N
Size

228KB
MD5

0a0fd9ffb35e84e3649b0b93715a2420
SHA1

e3d6697450682bec78bc9670b296ea65f0ba2888
SHA256

5cc9d83a757fb8062f3b0cc717a45fa11f8b959210799784aa4d51f2443ee3a3
SHA512

c477eb48564a31311a664ab41cae8ac7b059f2ea5f45fedffb4e5dc5d31da5e46ea8453d3dd86d0d0e83e5cbb3fcee765fd9563aea59c49bae5b5da3ad5249a5
SSDEEP

3072:PXGb0rLZQmAqNNi2b/YKBVWlQfKS3uWn8NT0gKgN0JeA5jicCtZAlWgp/dbbxfwW:vmm1U8g7ISKgMiKl/dblf+Kvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cc9d83a757fb8062f3b0cc717a45fa11f8b959210799784aa4d51f2443ee3a3N

Files

5cc9d83a757fb8062f3b0cc717a45fa11f8b959210799784aa4d51f2443ee3a3N
.dll windows:4 windows x86 arch:x86

10dcfdd15162eef45da254c461ca1dde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pr32301

PR_CEnterMonitor
PR_gethostbyaddr
PR_gethostbyname
PR_ComputeTime
PR_FormatTime
PR_ToGMT
PR_ExplodeTime
PR_NowMS
PR_FindSymbolAndLibrary
PR_GetLibraryPath
PR_GetLibName
PR_GetSystemInfo
PR_Abort
LL_TO_S
PR_SetPendingException
PR_SetThreadPrivate
PR_EnumerateThreads
PR_GetSP
PR_GetThreadPriority
PR_SetThreadPriority
PR_Resume
PR_Yield
PR_GetThreadPrivate
PR_DestroyThread
PR_CreateThread
PR_Start
PR_Suspend
PR_Exit
PR_NewNamedMonitor
PR_InitMonitor
PR_CWait
PR_CurrentThread
PR_PendingException
PR_CNotifyAll
PR_CNotify
PR_CExitMonitor
PR_CLOSE
PR_GC
PR_HashTableDestroy
PR_InitGC
PR_SetBeginGCHook
PR_RegisterRootFinder
PR_RegisterType
PR_RegisterSummaryPrinter
PR_CompareValues
PR_NewHashTable
PR_HashTableLookup
PR_HashTableAdd
PR_DumpIndent
PR_ForceFinalize
PR_UnloadLibrary
PR_FinishArenaPool
PR_AllocMemory
PR_FreeArenaPool
PR_InitArenaPool
PR_WRITE
PR_CompactArenaPool
PR_READ
PR_OpenDirectory
PR_ReadDirectory
PR_CloseDirectory
PR_Mkdir
stat
PR_AccessFile
PR_GetErrorString
PR_ArenaAllocate
PR_Init
PR_LoadLibrary
PR_LoadStaticLibrary
PR_NonBlockIO
PR_EnterMonitor
PR_GetGCInfo
PR_ExitMonitor
PR_OpenFile

wsock32

socket
ioctlsocket
htonl
ntohs
htons
WSAGetLastError
setsockopt
getsockname
ntohl
accept
bind
connect
recv
send
sendto
recvfrom
gethostname
closesocket
inet_ntoa
WSACleanup
WSAStartup
listen

msvcrt40

_unlink
_getcwd
_fstat
_lseek
_close
_strcmpi
_putenv
_strdup
longjmp
_adjust_fdiv
_initterm
_finite
strerror
localtime
gmtime
rand
srand
time
exit
abort
fputc
_errno
pow
atan2
floor
ceil
sqrt
log
exp
atan
acos
asin
tan
sin
cos
strtod
bsearch
mktime
qsort
memcmp
toupper
calloc
_setjmp3
strrchr
_ftol
_adj_fdiv_m32
_adj_fdiv_m64
fmod
rename
memmove
strcat
memset
printf
fopen
getc
__p___mb_cur_max
_isctype
__p__pctype
fclose
realloc
memcpy
free
strncpy
strcpy
malloc
sprintf
strchr
strncmp
__p__iob
fprintf
strcmp
getenv
strlen

kernel32

GlobalFree
GlobalAlloc
GetVersion

Exports

Exports

ArrayAlloc
CLASSPATH
CompiledFramePrev
CreateNewJavaStack
EE
ExecuteJava
FindClass
FindClassFromClass
IDToNameAndTypeString
IDToType
JRI_GetCurrentEnv
JRI_NewRuntime
Java_java_io_FileDescriptor_initSystemFD_stub
Java_java_io_FileDescriptor_valid_stub
Java_java_io_FileInputStream_available_stub
Java_java_io_FileInputStream_close_stub
Java_java_io_FileInputStream_open_stub
Java_java_io_FileInputStream_readBytes_stub
Java_java_io_FileInputStream_read_stub
Java_java_io_FileInputStream_skip_stub
Java_java_io_FileOutputStream_close_stub
Java_java_io_FileOutputStream_open_stub
Java_java_io_FileOutputStream_writeBytes_stub
Java_java_io_FileOutputStream_write_stub
Java_java_io_File_canRead0_stub
Java_java_io_File_canWrite0_stub
Java_java_io_File_delete0_stub
Java_java_io_File_exists0_stub
Java_java_io_File_isAbsolute_stub
Java_java_io_File_isDirectory0_stub
Java_java_io_File_isFile0_stub
Java_java_io_File_lastModified0_stub
Java_java_io_File_length0_stub
Java_java_io_File_list0_stub
Java_java_io_File_mkdir0_stub
Java_java_io_File_renameTo0_stub
Java_java_io_RandomAccessFile_close_stub
Java_java_io_RandomAccessFile_getFilePointer_stub
Java_java_io_RandomAccessFile_length_stub
Java_java_io_RandomAccessFile_open_stub
Java_java_io_RandomAccessFile_readBytes_stub
Java_java_io_RandomAccessFile_read_stub
Java_java_io_RandomAccessFile_seek_stub
Java_java_io_RandomAccessFile_writeBytes_stub
Java_java_io_RandomAccessFile_write_stub
Java_java_lang_ClassLoader_checkInitialized_stub
Java_java_lang_ClassLoader_defineClass_stub
Java_java_lang_ClassLoader_findSystemClass_stub
Java_java_lang_ClassLoader_init_stub
Java_java_lang_ClassLoader_resolveClass_stub
Java_java_lang_Class_forName_stub
Java_java_lang_Class_getClassLoader_stub
Java_java_lang_Class_getInterfaces_stub
Java_java_lang_Class_getName_stub
Java_java_lang_Class_getSuperclass_stub
Java_java_lang_Class_isInterface_stub
Java_java_lang_Class_newInstance_stub
Java_java_lang_Compiler_command_stub
Java_java_lang_Compiler_compileClass_stub
Java_java_lang_Compiler_compileClasses_stub
Java_java_lang_Compiler_disable_stub
Java_java_lang_Compiler_enable_stub
Java_java_lang_Compiler_initialize_stub
Java_java_lang_Double_doubleToLongBits_stub
Java_java_lang_Double_longBitsToDouble_stub
Java_java_lang_Double_toString_stub
Java_java_lang_Double_valueOf_stub
Java_java_lang_Float_floatToIntBits_stub
Java_java_lang_Float_intBitsToFloat_stub
Java_java_lang_Float_toString_stub
Java_java_lang_Float_valueOf_stub
Java_java_lang_Math_IEEEremainder_stub
Java_java_lang_Math_acos_stub
Java_java_lang_Math_asin_stub
Java_java_lang_Math_atan2_stub
Java_java_lang_Math_atan_stub
Java_java_lang_Math_ceil_stub
Java_java_lang_Math_cos_stub
Java_java_lang_Math_exp_stub
Java_java_lang_Math_floor_stub
Java_java_lang_Math_log_stub
Java_java_lang_Math_pow_stub
Java_java_lang_Math_rint_stub
Java_java_lang_Math_sin_stub
Java_java_lang_Math_sqrt_stub
Java_java_lang_Math_tan_stub
Java_java_lang_Object_clone_stub
Java_java_lang_Object_getClass_stub
Java_java_lang_Object_hashCode_stub
Java_java_lang_Object_notifyAll_stub
Java_java_lang_Object_notify_stub
Java_java_lang_Object_wait_stub
Java_java_lang_Runtime_buildLibName_stub
Java_java_lang_Runtime_execInternal_stub
Java_java_lang_Runtime_exitInternal_stub
Java_java_lang_Runtime_freeMemory_stub
Java_java_lang_Runtime_gc_stub
Java_java_lang_Runtime_initializeLinkerInternal_stub
Java_java_lang_Runtime_loadFileInternal_stub
Java_java_lang_Runtime_runFinalization_stub
Java_java_lang_Runtime_totalMemory_stub
Java_java_lang_Runtime_traceInstructions_stub
Java_java_lang_Runtime_traceMethodCalls_stub
Java_java_lang_SecurityManager_checkClassLoader_stub
Java_java_lang_SecurityManager_checkInitialized_stub
Java_java_lang_SecurityManager_checkScopePermission_stub
Java_java_lang_SecurityManager_classDepth_stub
Java_java_lang_SecurityManager_classLoaderDepth_stub
Java_java_lang_SecurityManager_currentClassLoader_stub
Java_java_lang_SecurityManager_getClassContext_stub
Java_java_lang_SecurityManager_resetScopePermission_stub
Java_java_lang_SecurityManager_setAppletScopePermission_stub
Java_java_lang_SecurityManager_setScopePermission_stub
Java_java_lang_System_arraycopy_stub
Java_java_lang_System_currentTimeMillis_stub
Java_java_lang_System_initProperties_stub
Java_java_lang_System_setSystemIO_stub
Java_java_lang_Thread_countStackFrames_stub
Java_java_lang_Thread_currentThread_stub
Java_java_lang_Thread_isAlive_stub
Java_java_lang_Thread_resume0_stub
Java_java_lang_Thread_setPriority0_stub
Java_java_lang_Thread_sleep_stub
Java_java_lang_Thread_start_stub
Java_java_lang_Thread_stop0_stub
Java_java_lang_Thread_suspend0_stub
Java_java_lang_Thread_yield_stub
Java_java_lang_Throwable_fillInStackTrace_stub
Java_java_lang_Throwable_printStackTrace0_stub
Java_java_net_DatagramSocket_datagramSocketBind_stub
Java_java_net_DatagramSocket_datagramSocketClose_stub
Java_java_net_DatagramSocket_datagramSocketCreate_stub
Java_java_net_DatagramSocket_datagramSocketPeek_stub
Java_java_net_DatagramSocket_datagramSocketReceive_stub
Java_java_net_DatagramSocket_datagramSocketSend_stub
Java_java_net_DatagramSocket_multicastJoinLeave_stub
Java_java_net_InetAddress_getHostByAddr_stub
Java_java_net_InetAddress_getInetFamily_stub
Java_java_net_InetAddress_getLocalHostName_stub
Java_java_net_InetAddress_lookupAllHostAddr_stub
Java_java_net_InetAddress_lookupHostAddr_stub
Java_java_net_InetAddress_makeAnyLocalAddress_stub
Java_java_net_PlainSocketImpl_socketAccept_stub
Java_java_net_PlainSocketImpl_socketAvailable_stub
Java_java_net_PlainSocketImpl_socketBind_stub
Java_java_net_PlainSocketImpl_socketClose_stub
Java_java_net_PlainSocketImpl_socketConnect_stub
Java_java_net_PlainSocketImpl_socketCreate_stub
Java_java_net_PlainSocketImpl_socketListen_stub
Java_java_net_SocketInputStream_socketRead_stub
Java_java_net_SocketOutputStream_socketWrite_stub
Java_java_util_Date_computeValue_stub
Java_java_util_Date_expand_stub
Java_java_util_Date_toGMTString_stub
Java_java_util_Date_toLocaleString_stub
Java_java_util_Date_toString_stub
Java_sun_awt_image_GifImageDecoder_parseImage_stub
NameAndTypeToHash
SetCompiledFrameAnnotation
SignalError
VerifyClassAccess
VerifyFieldAccess
allocCString
classJavaLangObject
do_execute_java_method
do_execute_java_method_vararg
exceptionDescribe
execute_java_constructor
execute_java_constructor_vararg
execute_java_dynamic_method
is_instance_of
is_subclass_of
javaString2CString
javaStringLength
java_lang_System_setSystemIO
makeCString
makeJavaString
monitorEnter
monitorExit
monitorNotify
monitorNotifyAll
monitorWait
newobject
privateGetenv
privatePutenv
setCLASSPATH
sizearray
start_java
sysAbort
sysAddDLSegment
sysAtexit
sysBuildLibName
sysDynamicLink
sysExit
sysGetMilliTicks
sysGmtime
sysInitializeLinker
sysLocaltime
sysMktime
sysMonitorDumpInfo
sysMonitorEnter
sysMonitorExit
sysMonitorSizeof
sysSaveLDPath
sysStrftime
sysThreadBootstrap
sysThreadCheckStack
sysThreadCreate
sysThreadDumpInfo
sysThreadEnumerateOver
sysThreadExit
sysThreadGetBackPtr
sysThreadGetPriority
sysThreadInit
sysThreadInitializeSystemThreads
sysThreadPostException
sysThreadResume
sysThreadSelf
sysThreadSetBackPtr
sysThreadSetPriority
sysThreadStackBase
sysThreadStackPointer
sysThreadSuspend
sysThreadYield
sysTime
sysTimeMillis
threadSelf
zip_close
zip_get
zip_open
zip_stat

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10dcfdd15162eef45da254c461ca1dde

Headers

File Characteristics

Imports

pr32301

wsock32

msvcrt40

kernel32

Exports

Exports

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 34KB - Virtual size: 34KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 932B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 34KB - Virtual size: 34KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 932B

.reloc
Size: 8KB - Virtual size: 8KB