1d9661408531230b49dd231521b265d347f35d2662d52a72d3872da53c35a0e1

General

Target

1d9661408531230b49dd231521b265d347f35d2662d52a72d3872da53c35a0e1
Size

36KB
MD5

19768793592553cf1f004827d6744d86
SHA1

57ae9ee0e52c8f72b2a660c01f7ce693832a99b5
SHA256

1d9661408531230b49dd231521b265d347f35d2662d52a72d3872da53c35a0e1
SHA512

9d746e3913a9f3c3d8ab7d6c55b039bf69c3dfc5a6620dbcf9546cb8753f721add2ec13198a9f7f8d248828dc4381ce2f73f2b6586e98aad60729f05877d1d5e
SSDEEP

768:BidDxUjyHQkWeitAbQlmtlkjlmFtuiOxPGLHLcsHvZ1iY2Mdu:Bid+jyHQdeb6UluMtyxPGLwiZ1iR

Score

N/A

Malware Config

Signatures

Files

1d9661408531230b49dd231521b265d347f35d2662d52a72d3872da53c35a0e1
.exe windows x86

bcf1fef5f79203fe2b0eb0d2ed44bb58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
DeleteFileA
SetFileAttributesA
MoveFileA
GetFileAttributesA
lstrcatA
lstrcpyA
Sleep
CopyFileA
CreateDirectoryA
WinExec
GetLocalTime
lstrcmpA
GetProcAddress
LoadLibraryA
CreateThread
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
FreeLibrary
ExitProcess
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
WaitForSingleObject
GetLastError
CreateMutexA
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetCurrentThreadId
lstrlenA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExA
GetSystemDefaultUILanguage
GetStartupInfoA
CreateProcessA
ExitThread
GetTickCount
InterlockedExchange
RaiseException
LocalAlloc

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

ws2_32

WSAIoctl
htons
socket
connect
setsockopt
recv
closesocket
gethostname
gethostbyname
WSACleanup
__WSAFDIsSet
select
send
inet_addr
sendto
WSASocketA
htonl
WSAStartup

msvcrt

_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
fopen
rand
srand
time
fclose
fputs
realloc
malloc
strstr
atoi
strncpy
strcspn
exit
strncmp
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs

shlwapi

SHDeleteKeyA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcf1fef5f79203fe2b0eb0d2ed44bb58

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

msvcrt

shlwapi

Sections

.text Size: 34KB - Virtual size: 33KB

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 34KB - Virtual size: 33KB

.rsrc
Size: 1024B - Virtual size: 920B