29c6022a6e7f5ef4a4f3da41c6348db7ff222b60803b8cdcb4f7a0fae1cbf8a5

Sharing

Copy URL

Twitter E-mail

General

Target

29c6022a6e7f5ef4a4f3da41c6348db7ff222b60803b8cdcb4f7a0fae1cbf8a5
Size

276KB
MD5

6216cb84f390edb90ac4769f918b05e4
SHA1

755840eec0340b9d3fbd46b292a80364f614f310
SHA256

29c6022a6e7f5ef4a4f3da41c6348db7ff222b60803b8cdcb4f7a0fae1cbf8a5
SHA512

d906007b28341994b906ea688632e471577ba92c92d4a8c77ce439e13bb40f416e875cf6c1f81d1c07c8b868f426fa5cdc71a70db258910bc0febd65cbdc85fd
SSDEEP

3072:iECbqTJmsisosCk1eHta4MJ4NM5YUQ31EchhC16BMII8m4D9l+9vrinXljgogha:ijqTus7baBMJbY1JC1MMz8BP+h2nNCa

Score

N/A

Malware Config

Signatures

Files

29c6022a6e7f5ef4a4f3da41c6348db7ff222b60803b8cdcb4f7a0fae1cbf8a5
.exe windows x86

4063f17288e809abdc5566d96ff3416a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetStdHandle
AllocConsole
ReadConsoleA
ReadFile
SetHandleInformation
CreatePipe
HeapFree
HeapAlloc
GetProcessHeap
GetLastError
OpenProcess
GetCurrentProcessId
GetDriveTypeA
GetModuleFileNameA
GetCurrentProcess
FindClose
FindNextFileA
FindFirstFileA
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
WaitForSingleObject
CreateSemaphoreA
InitializeCriticalSection
HeapDestroy
GetStartupInfoA
CreateProcessA
CloseHandle
LoadLibraryA
FreeLibrary
GetProcAddress
GetTickCount
GetLogicalDriveStringsA
Sleep
GetStringTypeExA
GetSystemInfo
VirtualQuery
VirtualProtect
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
CreateFileA
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
GetFileType
IsValidCodePage
IsValidLocale
IsBadWritePtr
VirtualAlloc
VirtualFree
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
GetModuleHandleA
HeapSize
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapCreate

user32

LoadStringA

advapi32

DuplicateToken
MapGenericMask
AccessCheck
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetFileSecurityA

ws2_32

sendto
recvfrom
gethostname
gethostbyname
htons
ioctlsocket
connect
select
send
setsockopt
recv
closesocket
inet_ntoa
WSAStartup
inet_addr
WSACleanup
socket

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
InternetQueryOptionA

mpr

WNetAddConnection2A

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4063f17288e809abdc5566d96ff3416a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

mpr

Sections

.text Size: 224KB - Virtual size: 221KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 192B

.text
Size: 224KB - Virtual size: 221KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 192B