f204dddfb731b230f379ad7b32777dfa6c405d8c2678b1d8b1da3bd068ba9ea5

General

Target

f204dddfb731b230f379ad7b32777dfa6c405d8c2678b1d8b1da3bd068ba9ea5
Size

216KB
MD5

642739ff69e6083091214455cc5effa0
SHA1

f37c89575bed4510df147d3df554cf03b73a9ea8
SHA256

f204dddfb731b230f379ad7b32777dfa6c405d8c2678b1d8b1da3bd068ba9ea5
SHA512

e4c8121bd6ce1e698ebeb4f4c3da10bd7f45d86f55c4d60bef4780518605158dbe9f697115b85f6be51781adc3ba226bb3aa13f88b24ff59b5e4bbaf20039b7b
SSDEEP

6144:uXAwR/s50LbQEKs0CZEQcUxEUyOaeG3iF:uXAgi03v0CZzcu

Score

N/A

Malware Config

Signatures

Files

f204dddfb731b230f379ad7b32777dfa6c405d8c2678b1d8b1da3bd068ba9ea5
.exe windows x86

77cb7a27d45f17293359d16189d36cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
CreateEventA
GetSystemDirectoryA
GetModuleFileNameA
GetPrivateProfileStringA
LockResource
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
ReadFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetFilePointer
GetLastError
SetUnhandledExceptionFilter
IsBadWritePtr
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

shell32

ShellExecuteA

ws2_32

inet_addr
htons
socket
connect
closesocket
send
recv
WSAStartup
gethostbyname

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77cb7a27d45f17293359d16189d36cc9

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 132KB - Virtual size: 128KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 132KB - Virtual size: 128KB