98e8774d63fc25444eefc76797999881378118e685985d06ec42eab0f6441d43

Sharing

Copy URL Twitter E-mail

General

Target

98e8774d63fc25444eefc76797999881378118e685985d06ec42eab0f6441d43
Size

336KB
MD5

616df558c3dc7b47b77c7f9c830fd2a7
SHA1

64ef64eabb1b19477bb26b4e5fd31052228baa9f
SHA256

98e8774d63fc25444eefc76797999881378118e685985d06ec42eab0f6441d43
SHA512

c56875d5881c2e27807e2fbc3d81200670bea7253ab778c12c8a37ffbad68d694aac1c1e0241b4823a4f07d6c5f75fd1ce518c2a3d4155271aa0d71c4f8e20bc
SSDEEP

6144:AwcT8JFSLJZ9LZY4jZ5YBTohsD/TVyTd8kLl+GCO:AVT8JFSFZ9L64jiohsD/pyOkL8

Score

N/A

Malware Config

Signatures

Files

98e8774d63fc25444eefc76797999881378118e685985d06ec42eab0f6441d43
.exe windows x86

cbe53f9a8e5e8ba8b123369d5515d290

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_iob
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_endthreadex
__CxxFrameHandler
_beginthreadex
_except_handler3
sprintf
isdigit
calloc
printf
perror
_errno
strerror
fflush
sscanf
wcstombs
mbstowcs
wcscpy
fprintf
strcat
toupper
fputc
wcscat
strtok
_ftol
__p__commode
srand
fwrite
fseek
ftell
malloc
free
exit
strncmp
atof
memcmp
strchr
_memccpy
_itoa
_stricmp
strncat
system
atoi
strcpy
fgets
fopen
fread
strcmp
fclose
memmove
memcpy
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_vsnprintf
strlen
strncpy
memset
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
__p__fmode
__set_app_type
_controlfp
rand
_strdup

msvcp60

?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ

kernel32

GetStartupInfoA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcessId
SetThreadPriority
RaiseException
TlsSetValue
DeleteCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
CreateEventA
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
InterlockedIncrement
GetThreadPriority
EnterCriticalSection
LeaveCriticalSection
ResumeThread
WaitForSingleObject
ResetEvent
InterlockedDecrement
TransactNamedPipe
MultiByteToWideChar
GetLastError
CopyFileA
GetModuleFileNameA
OpenProcess
GetModuleHandleA
FreeConsole
AllocConsole
GetStdHandle
WriteFile
CreateNamedPipeA
WaitNamedPipeA
CreateFileA
TerminateProcess
CloseHandle
GetTickCount
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
ExitProcess
GetSystemDirectoryA
CreateProcessA
ExpandEnvironmentStringsA
GetComputerNameA
GetVersionExA
GlobalMemoryStatus
ReadFile

user32

ExitWindowsEx
wsprintfA

advapi32

OpenServiceA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
DeleteService
ControlService
EnumServicesStatusA
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
RegDeleteValueA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ChangeServiceConfig2A
RegCreateKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetUserNameA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

ws2_32

gethostname
sendto
htonl
setsockopt
WSASocketA
ntohl
WSASetLastError
WSAIoctl
getservbyname
shutdown
ntohs
gethostbyaddr
inet_ntoa
gethostbyname
ioctlsocket
getpeername
getsockname
send
connect
WSACleanup
WSAStartup
inet_addr
recv
WSAGetLastError
select
__WSAFDIsSet
accept
bind
listen
closesocket
socket
getsockopt
htons

netapi32

NetUseDel
NetApiBufferFree
NetShareEnum
NetUserEnum
NetScheduleJobAdd
NetRemoteTOD
NetUseAdd

mpr

WNetAddConnection2A
WNetCancelConnection2W
WNetCancelConnection2A
WNetAddConnection2W

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

dnsapi

DnsQuery_A

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cbe53f9a8e5e8ba8b123369d5515d290

Headers

File Characteristics

Imports

msvcrt

msvcp60

kernel32

user32

advapi32

shell32

ws2_32

netapi32

mpr

psapi

dnsapi

Sections

.text Size: 332KB - Virtual size: 332KB

.text
Size: 332KB - Virtual size: 332KB