42e1744539332ce996d11117158dd64c890e6c458b7b52a1f3bd7ddca387bbbc

Sharing

Copy URL Twitter E-mail

General

Target

42e1744539332ce996d11117158dd64c890e6c458b7b52a1f3bd7ddca387bbbc
Size

192KB
MD5

1e1040487e42483669b3a07bcc5be6b0
SHA1

d732d3e2841f82ebe1a438e54a07b30a9fec72f9
SHA256

42e1744539332ce996d11117158dd64c890e6c458b7b52a1f3bd7ddca387bbbc
SHA512

24110552dcbc08d265e40b753a758249bf3b011b112b309977aebb8a2b106a1cc58dae446af43d2cbda95874f5b63c60b667734b9bbe2d056055c43faeb2ef88
SSDEEP

3072:tvPoSMlzzQUcjaOKki/CZzoSI0pIr7WuMLTaGAvrhqo:tvPohlzMO7LYa0pIrlUlAN

Score

N/A

Malware Config

Signatures

Files

42e1744539332ce996d11117158dd64c890e6c458b7b52a1f3bd7ddca387bbbc
.exe windows x86

a1a6871d057fffa60fef4c7b64dfa7d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
recvfrom
send
getservbyname
htonl
recv

wtsapi32

WTSOpenServerA
WTSCloseServer

uxtheme

DrawThemeText
CloseThemeData

netapi32

NetApiBufferFree
NetUserGetInfo

setupapi

SetupCreateDiskSpaceListA
SetupQueryDrivesInDiskSpaceListA
SetupCopyErrorA
SetupDeleteErrorA
SetupRemoveFromDiskSpaceListA
SetupDuplicateDiskSpaceListA
SetupDestroyDiskSpaceList

kernel32

VirtualFree
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetCurrentThread
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
Sleep
LoadLibraryA
GetProcAddress
WriteConsoleW
CreateEventA
PulseEvent
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1a6871d057fffa60fef4c7b64dfa7d7

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wtsapi32

uxtheme

netapi32

setupapi

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 64KB - Virtual size: 926KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 64KB - Virtual size: 926KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 4KB