8c27dd1708dfc7aeb646903ff92bc7444b5659dbc7144d36603fc920b769cf4a

General

Target

8c27dd1708dfc7aeb646903ff92bc7444b5659dbc7144d36603fc920b769cf4a
Size

26KB
MD5

2855416919529a44270d3da71a9783cf
SHA1

997658fba99eea202dce2da191506c6e6029fe90
SHA256

8c27dd1708dfc7aeb646903ff92bc7444b5659dbc7144d36603fc920b769cf4a
SHA512

0f2f3e936fed6df6d262f55749485d069c3a1b65943eefc254b9a320ca6ccb0c697803b4a413a4f1028a15b8021690e76849916d3c696f962a447a3eb306f14b
SSDEEP

384:3/9ZdgRQ08rT4xmlJdoVXr9ZC/qyyYU7Rwglo1I:3kXdWiy4Rwglo1

Score

N/A

Malware Config

Signatures

Files

8c27dd1708dfc7aeb646903ff92bc7444b5659dbc7144d36603fc920b769cf4a
.exe windows x86

f4a79944afeffba5ca92b8c71ace83af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
DeleteFileA
CloseHandle
GetFileSize
CreateFileA
CreateThread
CopyFileA
GetStringTypeA
LCMapStringW
LCMapStringA
ExitProcess
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CreateDirectoryA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
WinExec
Sleep
GetLastError
GetCPInfo
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA

user32

IsChild
wsprintfA
IsWindowVisible
IsZoomed
DispatchMessageA
TranslateMessage
GetMessageA

advapi32

RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

wsock32

recvfrom
sendto
connect
WSAStartup
htons
ioctlsocket
socket

comctl32

InitCommonControlsEx

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4a79944afeffba5ca92b8c71ace83af

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wsock32

comctl32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 240B

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 240B