a54f3319807219586f9d00d61d5010ebe2571dd12662226c895df2f5cc28429f

General

Target

a54f3319807219586f9d00d61d5010ebe2571dd12662226c895df2f5cc28429f
Size

40KB
MD5

4307c25e5f2d8f7a7f7d3b8fcac572f0
SHA1

9572cff049fcc868b1a3d6420b54256b923d59ea
SHA256

a54f3319807219586f9d00d61d5010ebe2571dd12662226c895df2f5cc28429f
SHA512

971eeb88cd3496f818dd82287baae312ebef5e5958793df411daa5d8dc408a36b209c53f1fafa15b4d5b45bc3c5fb1edcf6533779b6d24c33161653197087876
SSDEEP

768:FCz3cJQrh/GXtwSkmfaQLObFeGnWK1IaE5Ax5bs5:FnakXt9kmfaymEGnWK65An4

Score

N/A

Malware Config

Signatures

Files

a54f3319807219586f9d00d61d5010ebe2571dd12662226c895df2f5cc28429f
.exe windows x86

38aedab2bd1d2cd2ad6fd5dd12e01500

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_write
_iob
fprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
_close
_open
exit

kernel32

FlushConsoleInputBuffer
ReadFile
WaitForMultipleObjects
PeekConsoleInputA
ReadConsoleInputA
WriteFile
GetOverlappedResult
Sleep
ExitThread
GetCurrentThreadId
FormatMessageA
GetStdHandle
CreateThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLastError
GetModuleHandleA
WaitForSingleObject
WriteConsoleInputA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetEvent
LocalFree
CloseHandle
TerminateThread
CreateEventA

ws2_32

select
shutdown
setsockopt
getservbyname
__WSAFDIsSet
closesocket
WSAStartup
recv

advapi32

GetUserNameA

user32

CharToOemBuffA

mswsock

s_perror
rcmd
rexec

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fibpsbf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38aedab2bd1d2cd2ad6fd5dd12e01500

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

ws2_32

advapi32

user32

mswsock

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 524B

.rsrc Size: 32KB - Virtual size: 33KB

fibpsbf Size: - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 524B

.rsrc
Size: 32KB - Virtual size: 33KB

fibpsbf
Size: - Virtual size: 4KB