c5e31a1d2594b268116d86338b8dd0989400457efa39632b5bd8d283929793ae

Sharing

Copy URL

Twitter E-mail

General

Target

c5e31a1d2594b268116d86338b8dd0989400457efa39632b5bd8d283929793ae
Size

42KB
MD5

0054e515274d63fd51d1d88a001c18b0
SHA1

dfa952019b51f3b419562c836c64768409eaeb5a
SHA256

c5e31a1d2594b268116d86338b8dd0989400457efa39632b5bd8d283929793ae
SHA512

58298d5aedbec181e8f66f7d20de6c9893d002891bc2349a201a4b8e74c204be64f0918d7f7ec90fff4321fc809344d920a455f3fd6085563ab11f19d95d5134
SSDEEP

768:Z0mwxXA7N3ISOrPs1chtUHoiHaxWtg0rEhQA91md8sbWooUKOk:Zr8lSaExISax8SQA98d8swUBk

Score

N/A

Malware Config

Signatures

Files

c5e31a1d2594b268116d86338b8dd0989400457efa39632b5bd8d283929793ae
.exe windows x86

2a32010b0683a00f1a1c6066c0a61901

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

LocalFree
LocalAlloc
Sleep
SetThreadUILanguage
HeapSetInformation
InterlockedExchange
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar

msvcrt

_write
_setmode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_cexit
__getmainargs
exit
atoi
memset
memmove
isprint
_vsnprintf
__p__commode
__p__fmode
_except_handler4_common
?terminate@@YAXXZ
_exit
__set_app_type
_controlfp

ntdll

RtlExtendedLargeIntegerDivide
NtClose
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlUpcaseUnicodeStringToOemString
RtlIpv4AddressToStringA
NtDeviceIoControlFile
NtWaitForSingleObject
RtlInitString
RtlAnsiStringToUnicodeString
NtCreateFile
RtlFreeUnicodeString
RtlGUIDFromString
RtlInitUnicodeString

user32

CharToOemBuffA
OemToCharBuffA

wsock32

ntohl
ioctlsocket
ord1108

iphlpapi

NhGetInterfaceNameFromDeviceGuid

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ozynngb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2a32010b0683a00f1a1c6066c0a61901

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ntdll

user32

wsock32

iphlpapi

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 43KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

ozynngb Size: - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 43KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB

ozynngb
Size: - Virtual size: 4KB