bafaa41286a02590e4a9f238634e9c93867b49ad5b47a2f302984b650776f330

General

Target

bafaa41286a02590e4a9f238634e9c93867b49ad5b47a2f302984b650776f330
Size

52KB
MD5

0306b45638e60649d950fc1450f17c51
SHA1

67986e74cd8d773312685486ff043a58cfe051a9
SHA256

bafaa41286a02590e4a9f238634e9c93867b49ad5b47a2f302984b650776f330
SHA512

1307696b7b51407603e50614409f5cc8402bd7b4e52de29ed7a78ee4819794e95c9275402cdee396198a0a693615123b3e3c5a4737c2c869549e745df7fc0c3e
SSDEEP

384:yrGMXaqguHTSLF1ZAH5T+B6T2wh1Kh/1Fgb:h17uHTSLHic6TD

Score

N/A

Malware Config

Signatures

Files

bafaa41286a02590e4a9f238634e9c93867b49ad5b47a2f302984b650776f330
.exe windows x86

96bac0b78f58220be3ae55af5240e316

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
CreateThread
GetSystemInfo
GetProcAddress
GlobalMemoryStatus
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
CopyFileA
MoveFileExA
GetCurrentProcessId
Sleep
GetTickCount

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA

shell32

SHGetSpecialFolderPathA

ws2_32

select
__WSAFDIsSet
WSAIoctl
socket
connect
send
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
recv

msvcrt

memcpy
strcpy
strstr
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
malloc
??2@YAPAXI@Z
free
sprintf
rand
memset
printf
fprintf
_iob
strlen
_except_handler3
_local_unwind2
strcat

iphlpapi

GetIfTable

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fxufsrk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96bac0b78f58220be3ae55af5240e316

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

msvcrt

iphlpapi

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 32KB - Virtual size: 32KB

fxufsrk Size: - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 32KB - Virtual size: 32KB

fxufsrk
Size: - Virtual size: 4KB