52bc668f455a9ae15b149a3d664bd46b2454b1c228aca6e76beeebffbfbde6d0

Sharing

Copy URL

Twitter E-mail

General

Target

52bc668f455a9ae15b149a3d664bd46b2454b1c228aca6e76beeebffbfbde6d0
Size

57KB
MD5

4c1918506917005d0026692a6b115ce1
SHA1

794134afbc9b5c681471b7d28adbd476af12a7f3
SHA256

52bc668f455a9ae15b149a3d664bd46b2454b1c228aca6e76beeebffbfbde6d0
SHA512

9b30d452087cfc36ef802c4ff5e4ec173a58101a050a9dd14e7cfaab27751b39cd6468a9dc72a90c6f0b6ca3227385a624c576f89524d61210e9ada66b179a10
SSDEEP

768:lHK1sC8yzOgCT2yfqp/gLV1qsSz7nQwyaVmxLtkdDjzj3Qb76ZONi7cA0z5Ac:lH/C8AOf+Jg3qsSXTyaqtMDIFA0Wc

Score

N/A

Malware Config

Signatures

Files

52bc668f455a9ae15b149a3d664bd46b2454b1c228aca6e76beeebffbfbde6d0
.exe windows x86

074241b1a52c1db21a0618f576e06853

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetComputerNameW
SetFilePointer
CreateFileW
GetModuleFileNameW
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
OpenProcess
TerminateProcess
CreateProcessA
GetStartupInfoA
CreatePipe
MultiByteToWideChar
PeekNamedPipe
FileTimeToSystemTime
FindClose
FindNextFileW
FindFirstFileW
GetTickCount
LoadLibraryW
CreateProcessW
MoveFileExA
DeleteFileA
GetModuleFileNameA
SetFileTime
GetFileTime
FindFirstFileA
SetFileAttributesA
GetComputerNameA
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
GetFileAttributesA
GetModuleHandleA
WriteFile
DeleteFileW
WaitForMultipleObjects
GetTempPathA
GetTempFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
CreateEventA
GetLastError
GetWindowsDirectoryA
GetWindowsDirectoryW
GetLocalTime
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetDriveTypeA

user32

OpenWindowStationA
CloseWindowStation

advapi32

CloseServiceHandle
DeleteService
RegSetValueExA
SetTokenInformation
CreateProcessAsUserA
DuplicateTokenEx
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA

msvcrt

__setusermatherr
??0exception@@QAE@ABQBD@Z
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
wcscat
__CxxFrameHandler
atoi
strchr
wcscpy
wcsrchr
wcslen
swprintf
wcschr
wcsncpy
rand
_mbsnbcpy
_mbsstr
_except_handler3
_mbschr
memmove
_CxxThrowException
strstr
_strnicmp
_stricmp
_wcsnicmp
_wcsicmp
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
memcpy
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??1exception@@UAE@XZ
strlen
??0exception@@QAE@ABV0@@Z

ws2_32

accept
listen
bind
socket
closesocket
send
select
htons
connect
ioctlsocket
WSAGetLastError
setsockopt
WSAStartup
ntohs
inet_addr
recv
inet_ntoa
gethostbyname

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA

iphlpapi

GetTcpTable
SetTcpEntry

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

074241b1a52c1db21a0618f576e06853

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

wininet

iphlpapi

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 4KB