e9e0e5d02026e34fd833b2f9e4800ee4b4ff7896b367b049646166d7f2cf773e

General

Target

e9e0e5d02026e34fd833b2f9e4800ee4b4ff7896b367b049646166d7f2cf773e
Size

52KB
MD5

73a9e061e87fd2b5a5ff2e01de993ee7
SHA1

f2abfdc9ab6852745ffb877783abd6db63c143d0
SHA256

e9e0e5d02026e34fd833b2f9e4800ee4b4ff7896b367b049646166d7f2cf773e
SHA512

4a098d5fafb5282a8807855bb2feccffabc35c5942a0dc8033169176c9616fe93fad252f14d4f1f7ae4b39ebbbc8d1bbb531b5f4acf14be7b4f0abcb04f07e7b
SSDEEP

768:Cx/fukfPYZNQZfzcUM5fWX8UJQCYrjmZa9irTVO6PkUwtszctsX:CxhfPMQOWztYvMaQVlTwtsQ

Score

N/A

Malware Config

Signatures

Files

e9e0e5d02026e34fd833b2f9e4800ee4b4ff7896b367b049646166d7f2cf773e
.exe windows x86

f839bd8374dcb53f52769833e3a4c1ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

closesocket
ntohs
send
gethostbyname
connect
shutdown
ioctlsocket
socket
recv
gethostname
WSAStartup
WSACleanup

kernel32

SetEvent
CreateEventA
GetTickCount
GetStartupInfoA
FindFirstFileA
FindClose
FindFirstFileW
GetModuleFileNameA
Sleep
WinExec
CopyFileA
CreateDirectoryA
GetModuleHandleA
CreateFileA
DeviceIoControl
CloseHandle
GetVolumeInformationA
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalFree
ResetEvent
WaitForSingleObject
ReleaseMutex
CreateMutexA

msvcrt

strncpy
strncmp
_mbsinc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_beginthread
_strnicmp
_stricmp
_findfirst
_findnext
_findclose
memmove
sprintf
atoi
strchr
fseek
ftell
fread
malloc
free
fopen
fwrite
fclose
_endthread
_adjust_fdiv

netapi32

Netbios

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f839bd8374dcb53f52769833e3a4c1ef

Headers

File Characteristics

Imports

wsock32

kernel32

msvcrt

netapi32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB