e14978f59c51fd0511eeda05ce09156d8ddc84f92c55534c3a5dc2bf46f7c8d6

General

Target

e14978f59c51fd0511eeda05ce09156d8ddc84f92c55534c3a5dc2bf46f7c8d6
Size

36KB
MD5

03121f81cf73257f1090f726d2ba04ef
SHA1

3eab5a17666a3bd3a598ee10a202ee3d4ce787e2
SHA256

e14978f59c51fd0511eeda05ce09156d8ddc84f92c55534c3a5dc2bf46f7c8d6
SHA512

a7df8b2aff0a8ae633230733f400e5263128e0e56ae69e7bdce3604da0f751a2cebe16b4b06b8776f023a8a9d1a4f19b3db9688c55f1130d2162ff61fdfbe9ed
SSDEEP

384:a+CqVS/LVQaryop3s+bAweqkjFqzM16CRBWkGEUvwiL37yiArnnW8xi4tqyoOOuf:fVS/Nyoxsg6FP1NYT37erW8xi4tq90N

Score

N/A

Malware Config

Signatures

Files

e14978f59c51fd0511eeda05ce09156d8ddc84f92c55534c3a5dc2bf46f7c8d6
.exe windows x86

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
lstrlenA
GetCurrentThreadId
CreateMutexA
GetLastError
ExitProcess
WaitForSingleObject
CloseHandle
CreateThread
LoadLibraryA
Sleep
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
HeapFree
VirtualFree
GetTickCount
lstrcpyA
lstrcatA
ExitThread
CreateProcessA
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

GetMessageA
GetInputState
wsprintfA
PostThreadMessageA

advapi32

OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA

ws2_32

recv
setsockopt
WSAIoctl
__WSAFDIsSet
socket
connect
closesocket
select
send
WSAStartup
htons
gethostbyname
inet_addr
sendto

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 920B