6004a678f2f27b8fbf64ed51e9e4d52938acc5af6cf853ee6f55998793048b03

Sharing

Copy URL Twitter E-mail

General

Target

6004a678f2f27b8fbf64ed51e9e4d52938acc5af6cf853ee6f55998793048b03
Size

276KB
MD5

5f1e7156c8cc280836a2147d4b6e6bfd
SHA1

83ccec07b90860fbecb6dd5ef86bf613e5024c2b
SHA256

6004a678f2f27b8fbf64ed51e9e4d52938acc5af6cf853ee6f55998793048b03
SHA512

d5820655fa39d528c71da1db286f77a121b4332a36d6c907c1c9dbddd06373ad48dd421fb2e37e0e226aeae6b80c683e3d10353df8b1b886813e881d8469102d
SSDEEP

6144:MFPbBK/mNp6hhL06gh5qE6Fia6g7IVUGEq/x1xMTSvFg:MJBTNpUzCv6FiaJ7NOx1Lg

Score

N/A

Malware Config

Signatures

Files

6004a678f2f27b8fbf64ed51e9e4d52938acc5af6cf853ee6f55998793048b03
.exe windows x86

7c4a081386308e00b13eb952a21e0996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetComputerNameA
ResetEvent
CreateMutexA
ResumeThread
SuspendThread
GetLastError
PulseEvent
CreateEventA
LeaveCriticalSection
SetEvent
EnterCriticalSection
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
OpenEventA
Sleep
WaitForSingleObject
GlobalFree
LocalFree
GetLocalTime
HeapReAlloc
SetEndOfFile
GetVersion
CreateFileA
ReadFile
WriteFile
GetPrivateProfileStringA
GetPrivateProfileIntA
DeviceIoControl
GetTickCount
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetFileSize
GetTempPathA
UnmapViewOfFile
FlushViewOfFile
DeleteFileA
ReleaseMutex
lstrlenA
GetVersionExA
MultiByteToWideChar
lstrcmpA
LocalAlloc
WideCharToMultiByte
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
RtlUnwind
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
SetEnvironmentVariableA
GetCommandLineA
GetCurrentProcessId
GetLocaleInfoW
GetLocaleInfoA
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW

advapi32

InitializeSecurityDescriptor
RegOpenKeyA
SetSecurityDescriptorDacl
RegQueryValueExA
StartServiceCtrlDispatcherA
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CreateServiceA
DeleteService
RegOpenKeyExA
RegSetValueExA
CloseServiceHandle
RegCloseKey
StartServiceA
RegCreateKeyExA
GetUserNameA
SetServiceStatus
ReportEventA
DeregisterEventSource
RegisterServiceCtrlHandlerA
RegisterEventSourceA

wsock32

htons
bind
closesocket
select
__WSAFDIsSet
recvfrom
sendto
getsockname

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7c4a081386308e00b13eb952a21e0996

Headers

File Characteristics

Imports

kernel32

advapi32

wsock32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 20KB - Virtual size: 71KB

.rsrc Size: 4KB - Virtual size: 1KB

.text Size: 120KB - Virtual size: 120KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 20KB - Virtual size: 71KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 120KB - Virtual size: 120KB