4e9a0331606552766a2f54623aede5c814a1ea10955e9e0d2125960e6ee4198c

General

Target

4e9a0331606552766a2f54623aede5c814a1ea10955e9e0d2125960e6ee4198c
Size

24KB
MD5

647cbfe3b54e7b75015f5a83de3363c0
SHA1

e6a21564f1e509efbe9041ab444a6beb8978e9c1
SHA256

4e9a0331606552766a2f54623aede5c814a1ea10955e9e0d2125960e6ee4198c
SHA512

53f1cd62c31396fa315adf81d068e66c4d7c14125e0811bdfee8ab050f1420260e638ec50d3e403b2a5e9a25784ac4867db66283bbc69d5a9c97686343f27c62
SSDEEP

384:HrGMXaqguHTSLF1ZAH5T+46T2wh1Kh/1Fgb:617uHTSLHiJ6TD

Score

N/A

Malware Config

Signatures

Files

4e9a0331606552766a2f54623aede5c814a1ea10955e9e0d2125960e6ee4198c
.exe windows x86

96bac0b78f58220be3ae55af5240e316

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
CreateThread
GetSystemInfo
GetProcAddress
GlobalMemoryStatus
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
CopyFileA
MoveFileExA
GetCurrentProcessId
Sleep
GetTickCount

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA

shell32

SHGetSpecialFolderPathA

ws2_32

select
__WSAFDIsSet
WSAIoctl
socket
connect
send
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
recv

msvcrt

memcpy
strcpy
strstr
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
malloc
??2@YAPAXI@Z
free
sprintf
rand
memset
printf
fprintf
_iob
strlen
_except_handler3
_local_unwind2
strcat

iphlpapi

GetIfTable

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96bac0b78f58220be3ae55af5240e316

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

msvcrt

iphlpapi

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 32KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 32KB