aa8d5f85aa9be0a2b65141603021560d786e71c0eba77d2aa313df10d42b5082

General

Target

aa8d5f85aa9be0a2b65141603021560d786e71c0eba77d2aa313df10d42b5082
Size

447KB
MD5

4692e913ae634751cc14dc41d405f9e4
SHA1

d4272d1462de1c9b136c2ae120a4be4064e1fa89
SHA256

aa8d5f85aa9be0a2b65141603021560d786e71c0eba77d2aa313df10d42b5082
SHA512

595f5217058d15ff003f07d5b3c64e024f482489b4591eb2356d931c1f34c4bc1409d644745580b3e5d78aecc50f9f751fa285be0adba5b7543787ad363ae820
SSDEEP

6144:CXw2EVnRjaffKL+u1y0c0pEEqKl9ecyVe0hvFESx8DjDQdIkrd80GYNAX+Hi:gw25nMKy+PDjhvdsQrdtuM

Score

N/A

Malware Config

Signatures

Files

aa8d5f85aa9be0a2b65141603021560d786e71c0eba77d2aa313df10d42b5082
.exe windows x86

22bf9af10947e7f1041bcd33a2c6b19d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

LineTo
ExcludeClipRect
SetBkMode
MoveToEx

ws2_32

WSAWaitForMultipleEvents
accept
WSACleanup
bind
WSAStartup
connect
socket
closesocket

kernel32

CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
PrepareTape
FindFirstChangeNotificationA
FindNextChangeNotification
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
LoadLibraryA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 186KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22bf9af10947e7f1041bcd33a2c6b19d

Headers

File Characteristics

Imports

gdi32

ws2_32

kernel32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 186KB - Virtual size: 217KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 186KB - Virtual size: 217KB

.rsrc
Size: 2KB - Virtual size: 1KB