3a821e0e1c2b5684450e4b326c198772052015689bebb05a73749ac388002eb5

General

Target

3a821e0e1c2b5684450e4b326c198772052015689bebb05a73749ac388002eb5
Size

36KB
MD5

6b1df84409b4d5a404166da0b299b9f0
SHA1

6da05c2f91c7c9138f67ec674a2c6ad0dc119433
SHA256

3a821e0e1c2b5684450e4b326c198772052015689bebb05a73749ac388002eb5
SHA512

6acdbab1567ac85b07a956da7b90951c69dbf414b0fc3fd127747629793c603feb982aaedafabeb34c42e8da0e30450b62f6fbd5a0ff137015336d48281a0320
SSDEEP

384:a+CqVS/LVQaryop3s+bAweqkjFqzM16CRBWkGEUvwiL37yiArnnW8xi4t/yoOOuf:fVS/Nyoxsg6FP1NYT37erW8xi4t/90N

Score

N/A

Malware Config

Signatures

Files

3a821e0e1c2b5684450e4b326c198772052015689bebb05a73749ac388002eb5
.exe windows x86

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
lstrlenA
GetCurrentThreadId
CreateMutexA
GetLastError
ExitProcess
WaitForSingleObject
CloseHandle
CreateThread
LoadLibraryA
Sleep
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
HeapFree
VirtualFree
GetTickCount
lstrcpyA
lstrcatA
ExitThread
CreateProcessA
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

GetMessageA
GetInputState
wsprintfA
PostThreadMessageA

advapi32

OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA

ws2_32

recv
setsockopt
WSAIoctl
__WSAFDIsSet
socket
connect
closesocket
select
send
WSAStartup
htons
gethostbyname
inet_addr
sendto

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 920B