c08b60dc76b98890caa6498c8a99ee90bc18bccb79e346532807a3581322746c

Sharing

Copy URL Twitter E-mail

General

Target

c08b60dc76b98890caa6498c8a99ee90bc18bccb79e346532807a3581322746c
Size

224KB
MD5

79969f30b48264fbeba52260bb9b8590
SHA1

d2dfe83ef50063aaa81c1f796b0cf4ad24c55c05
SHA256

c08b60dc76b98890caa6498c8a99ee90bc18bccb79e346532807a3581322746c
SHA512

26d8983242bbb650ba557360c548b4035c27a05298012169487d4621ac1677c6b0274fc7b09feeccf07a9a24a44b9b1edf6a3d751913034d7f060327ce3318eb
SSDEEP

6144:0ireU9u28e+kAA13kAPCyIh90m5wSgtLoWVLNOYf4FyWL:04FQ2ZnAa3kN9p5wSgGWbKyW

Score

N/A

Malware Config

Signatures

Files

c08b60dc76b98890caa6498c8a99ee90bc18bccb79e346532807a3581322746c
.exe windows x86

6cfaedcba03929fb73bcee2ceb7ed1fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
putchar
rand
strncat
vsprintf
exit
_errno
_onexit
strncpy
strncmp
atoi
fopen
fwrite
fclose
strrchr
_except_handler3
free
malloc
_ftol
memmove
__CxxFrameHandler
??2@YAPAXI@Z
??1type_info@@UAE@XZ
_CxxThrowException
_strnicmp
_strnset
__dllonexit
_CIpow
??3@YAXPAX@Z
printf
_CIacos
calloc
_beginthreadex
_strupr
wcscpy
wcstombs
wcslen
strchr
mbstowcs

kernel32

GetModuleHandleA
WideCharToMultiByte
GetStartupInfoA
LocalFree
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SetEvent
WaitForSingleObject
CloseHandle
LoadLibraryA
GetProcAddress
Sleep

user32

IsWindow
SendMessageA
CreateWindowExA

ws2_32

connect
setsockopt
gethostbyname
socket
closesocket
ntohs
htons
WSAStartup
WSACleanup
recv
select
send
inet_ntoa
inet_addr
getsockname
gethostname
__WSAFDIsSet
recvfrom
bind

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

ole32

CLSIDFromString
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
CLSIDFromProgID

oleaut32

GetErrorInfo
SysFreeString
SysAllocString
VariantClear

msvfw32

ICSendMessage

Sections

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6cfaedcba03929fb73bcee2ceb7ed1fc

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ws2_32

msvcp60

ole32

oleaut32

msvfw32

Sections

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 208KB - Virtual size: 232KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 208KB - Virtual size: 232KB