a04e47087f92260c6698d9b4843889bde9e831692d4938158b2e378d0049b687

Sharing

Copy URL

Twitter E-mail

General

Target

a04e47087f92260c6698d9b4843889bde9e831692d4938158b2e378d0049b687
Size

90KB
MD5

f064335996b4ca3551a06274ee4f866e
SHA1

9af31263df9ed8a53e65e9e3efac190e67ce4b99
SHA256

a04e47087f92260c6698d9b4843889bde9e831692d4938158b2e378d0049b687
SHA512

d6e4a07bae406a6b950f5d788f7274fc6d38904ce6d5bfa45b5bcb99f22ccbac214f79541a3836b90d6a5b80dcfff140027ba27ddb8d0b0dbf7972f5fd46ce3d
SSDEEP

1536:Ql12JH4Utk08yOQrLK2BNk0mNFc6oMmJDv+KUbNKOLRlpmccly8BAkPnu:M74W2A0mN+JMm/UbNdbmcwy8BL

Score

N/A

Malware Config

Signatures

Files

a04e47087f92260c6698d9b4843889bde9e831692d4938158b2e378d0049b687
.exe windows x86

8fa735245a6340375619ced7465e5865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2help

WahCreateSocketHandle
WahCloseSocketHandle
WahCreateNotificationHandle
WahCloseHandleHelper
WahCloseThread
WahWaitForNotification
WahCreateHandleContextTable
WahCompleteRequest
WahCloseNotificationHandleHelper

kernel32

GetStartupInfoA
VirtualAlloc
GetCurrentProcessId
TerminateProcess
GetTickCount
GetModuleHandleA
GetCurrentProcess
GetCurrentThreadId

msvcrt

_beep
_adjust_fdiv
_initterm
_acmdln
_c_exit
__setusermatherr
exit
__p__commode
_atoldbl
_access
__getmainargs
__set_app_type
_chdir
_cabs
_exit
_atoi64
__p__fmode
_XcptFilter
_assert
_except_handler3

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
WmiParseTraceEvent

oleaut32

SysAllocStringByteLen
VariantClear
SysFreeString
GetActiveObject
SafeArrayCreate

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fa735245a6340375619ced7465e5865

Headers

DLL Characteristics

File Characteristics

Imports

ws2help

kernel32

msvcrt

advapi32

oleaut32

Sections

.textbss Size: - Virtual size: 96KB

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 42KB - Virtual size: 41KB

.rsrc Size: 2KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 96KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 42KB - Virtual size: 41KB

.rsrc
Size: 2KB - Virtual size: 1KB