0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda

General

Target

0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda
Size

118KB
MD5

03e1ed952ef1ed99fe269d1cb0c15c21
SHA1

ae17a5ecdb5979c5783fbeddae062fa1f1e20fdd
SHA256

0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda
SHA512

b0896292b8e4bd9c9557ba1ef2c89a46be0bccde0e51ad857ccb4d2f5133b34b04095f67cce6fe3e51a209a9ad0d390a729c6b306618b9458a8fa7084c6ac50f
SSDEEP

3072:dSKf2N9xxjcgjQFrUBX/7RVIc7BFNROGgm:8KfUjcOWrY/7jxZ

Score

N/A

Malware Config

Signatures

Files

0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda
.exe windows x86

462f63682626cfc5c88f45cce550cbee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
DeleteFileW
CreateFileMappingA
InterlockedExchange
SetUnhandledExceptionFilter
GetStartupInfoA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetLastError
TerminateProcess
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegQueryValueExW
WmiMofEnumerateResourcesA

wsock32

GetAddressByNameA
GetNameByTypeA
sethostname
SetServiceA
GetTypeByNameA
dn_expand
WSARecvEx
GetServiceA
NPLoadNameSpaces
gethostbyname
TransmitFile
EnumProtocolsA

Sections

.textbss
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

462f63682626cfc5c88f45cce550cbee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wsock32

Sections

.textbss Size: - Virtual size: 108KB

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 53KB - Virtual size: 53KB

.rsrc Size: 6KB - Virtual size: 6KB

.textbss
Size: - Virtual size: 108KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 53KB - Virtual size: 53KB

.rsrc
Size: 6KB - Virtual size: 6KB