c8d2aa6bbb5be7c2176a583dd34f1366923806d5c279bc43fd8371977b01d84b

General

Target

c8d2aa6bbb5be7c2176a583dd34f1366923806d5c279bc43fd8371977b01d84b
Size

427KB
MD5

91ed93dc66d9929d0a0dcd6ba6d92593
SHA1

90dece8e65d54d3599df4774fe8a4737fe85e47c
SHA256

c8d2aa6bbb5be7c2176a583dd34f1366923806d5c279bc43fd8371977b01d84b
SHA512

d72efe11256b55fbe8eb2cdbb918ace04bc76a6b810466a65127d1f27bb2bcccd870cecd470caca0c196dd472d4ec51d3fea42d7d8ecab35ecdc2e116463a80c
SSDEEP

12288:XdusjBEsqeHWCbXEkmpYDVplEEBZMVJaJvm:ttoeHdLEk+4VcWu0Jvm

Score

N/A

Malware Config

Signatures

Files

c8d2aa6bbb5be7c2176a583dd34f1366923806d5c279bc43fd8371977b01d84b
.exe windows x86

1958ee3137d8b8956111e9696b0ebca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
Sleep
GetSystemTime
VirtualAlloc
CloseHandle
LoadLibraryA
GetLastError
SetFirmwareEnvironmentVariableW
GetProcAddress
ResetEvent
GetSystemInfo
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
FlushFileBuffers
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
SetEndOfFile
ReadFile
HeapSize
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoA
VirtualQuery

dnsapi

DnsModifyRecordsInSet_A

msacm32

acmStreamOpen

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1958ee3137d8b8956111e9696b0ebca7

Headers

File Characteristics

Imports

kernel32

dnsapi

msacm32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 256KB - Virtual size: 254KB

.data Size: 4KB - Virtual size: 368KB

.rsrc Size: 132KB - Virtual size: 128KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 256KB - Virtual size: 254KB

.data
Size: 4KB - Virtual size: 368KB

.rsrc
Size: 132KB - Virtual size: 128KB