5946018eb48a65b705961fe892c6e7bd66f252c964a701087c6be1e4930fdc57

Sharing

Copy URL Twitter E-mail

General

Target

5946018eb48a65b705961fe892c6e7bd66f252c964a701087c6be1e4930fdc57
Size

936KB
MD5

77130e5a022a0973f00513d3915589cd
SHA1

0850abe8adf053b8eccdb608b16468d2519c82b7
SHA256

5946018eb48a65b705961fe892c6e7bd66f252c964a701087c6be1e4930fdc57
SHA512

2996b9437b0f8b86fb2220aba6184ef1709841030c39d6a03ce46deed8230eee4ab08cf98a8f76f90008c5e7d089a1bce5ed638e5dd4a542a538bb25d914a5c8
SSDEEP

24576:7ojV3WdfQ055VpAfL4y1tHBzwSJ8XptsMX+aqmQT8:SVWf3ppWdtHBe/sMX+q

Score

N/A

Malware Config

Signatures

Files

5946018eb48a65b705961fe892c6e7bd66f252c964a701087c6be1e4930fdc57
.exe windows x86

71d2ed2e4b07bbff3efea8680b2620be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

closesocket
gethostname

kernel32

FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
SetCurrentDirectoryA
SystemTimeToFileTime
GetLocalTime
WaitForSingleObject
CreateEventA
SetEvent
ResumeThread
SuspendThread
SetErrorMode
SetHandleInformation
Sleep
ResetEvent
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetEnvironmentVariableW
GetTickCount
GetProcessTimes
GetCurrentProcess
ReleaseMutex
CreateMutexA
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetVolumeInformationA
GetDriveTypeA
VirtualAlloc
VirtualFree
SetLastError
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateFileA
ReadFile
WriteFile
DeviceIoControl
HeapAlloc
ExitProcess
SetConsoleCtrlHandler
GetTimeZoneInformation
GetSystemTime
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
SetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetCurrentDirectoryA
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
HeapFree
GetFileType
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
MoveFileA
MoveFileW
GetFileAttributesW
DeleteFileW
DuplicateHandle
GetModuleFileNameA
SetFileAttributesA
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
SetFilePointer
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
SetStdHandle
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetEnvironmentVariableW
SetEndOfFile
GetFullPathNameW
GetStringTypeA
GetStringTypeW
CreatePipe
HeapSize
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
GetCurrentDirectoryW
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersion
GetStartupInfoA
GetStartupInfoW
GetExitCodeProcess
GetCommandLineA
CreateProcessA
GetCommandLineW
CreateProcessW
GetLastError
CloseHandle
GetWindowsDirectoryA
SetConsoleTitleA
TerminateProcess
HeapReAlloc
HeapDestroy

user32

ScreenToClient
GetClientRect
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetFocus
GetFocus
GetParent
EndDialog
GetDlgItemTextA
MoveWindow
SetDlgItemTextA
MessageBeep
GetWindowLongA
SendMessageA
GetDlgItem
GetWindowRect
EnableWindow
GetSystemMetrics
GetActiveWindow
MessageBoxA
wsprintfA
ShowWindow
GetDlgItemTextW
SetWindowTextA

advapi32

RegisterServiceCtrlHandlerA
GetUserNameW
StartServiceCtrlDispatcherA
SetServiceStatus
RegCloseKey
RegOpenKeyExA
RegisterEventSourceA
DeregisterEventSource
RegQueryValueExA
ReportEventA
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
GetUserNameA
RegEnumKeyExA

netapi32

Netbios

comctl32

ord17

comdlg32

GetOpenFileNameA

Sections

.text
Size: 712KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

71d2ed2e4b07bbff3efea8680b2620be

Headers

File Characteristics

Imports

wsock32

kernel32

user32

advapi32

netapi32

comctl32

comdlg32

Sections

.text Size: 712KB - Virtual size: 710KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 72KB - Virtual size: 135KB

_TEXT_HA Size: 68KB - Virtual size: 66KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 712KB - Virtual size: 710KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 72KB - Virtual size: 135KB

_TEXT_HA
Size: 68KB - Virtual size: 66KB

.rsrc
Size: 52KB - Virtual size: 52KB