ed952031dc4847304a93f9de38751535609bd54c7a85b5d0f477409e53b130a1

Sharing

Copy URL Twitter E-mail

General

Target

ed952031dc4847304a93f9de38751535609bd54c7a85b5d0f477409e53b130a1
Size

60KB
MD5

6154fa35866c82313fd9481d47258f80
SHA1

8204d59f715f96126e27b427adcd58d342f6220f
SHA256

ed952031dc4847304a93f9de38751535609bd54c7a85b5d0f477409e53b130a1
SHA512

91704f9eb604c7f9656a4d65c948b9fd4b2f9b5b2eb109ec676cde6a64f2eb604f88aa591cf8df0eefb69fbd547b2dd7e0e1c54c908a68f16b66b04c46a1f59f
SSDEEP

1536:YaPuPeXonnUStQXDI4spvVp+N8NECtH3T:YaPVgnUStM0BFn+N8FD

Score

N/A

Malware Config

Signatures

Files

ed952031dc4847304a93f9de38751535609bd54c7a85b5d0f477409e53b130a1
.exe windows x86

2297193c56939c117ff494073c528fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
rand
sprintf
malloc
strtok
atoi
free
fopen
fclose
_adjust_fdiv
_controlfp

kernel32

GetModuleFileNameA
GetCommandLineA
CreateFileA
WriteFile
CloseHandle
GetModuleHandleA
GetProcAddress
Sleep
OutputDebugStringA
GetStartupInfoA
DeleteFileA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hsgdgkz
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yssurqw
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kfspquc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

grfflep
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

njpbpxs
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2297193c56939c117ff494073c528fab

Headers

File Characteristics

Imports

wsock32

msvcrt

kernel32

user32

shell32

ole32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 36KB - Virtual size: 64KB

hsgdgkz Size: - Virtual size: 28KB

yssurqw Size: - Virtual size: 32KB

kfspquc Size: - Virtual size: 28KB

grfflep Size: - Virtual size: 32KB

njpbpxs Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 36KB - Virtual size: 64KB

hsgdgkz
Size: - Virtual size: 28KB

yssurqw
Size: - Virtual size: 32KB

kfspquc
Size: - Virtual size: 28KB

grfflep
Size: - Virtual size: 32KB

njpbpxs
Size: - Virtual size: 4KB