d0c5e8eb0e272cc5988845e75f866a82b06507f9026b20ab18b38b5353a59909

Sharing

Copy URL Twitter E-mail

General

Target

d0c5e8eb0e272cc5988845e75f866a82b06507f9026b20ab18b38b5353a59909
Size

183KB
MD5

f2a6c7a25b9ff82a142220253007b728
SHA1

e7be34afa21fdf04ce20bb7855d3bdb9232d62a2
SHA256

d0c5e8eb0e272cc5988845e75f866a82b06507f9026b20ab18b38b5353a59909
SHA512

56c24c5ea646563132b0c597da09f280478ff9e86bada85c8e7c6272268f493c4ed1f3507fc02a1c4fe6c7518adea327fd390f004f826c5df753d16d73690e77
SSDEEP

3072:/wbQXp9M9ODp8bAOH8Lv34/BpQ+S8Zls52SJxBiHEcxXzOE:4bi08hOcLvoDQiZltSo

Score

N/A

Malware Config

Signatures

Files

d0c5e8eb0e272cc5988845e75f866a82b06507f9026b20ab18b38b5353a59909
.exe windows x86

95bad1c06ce23486470fb54c464c1751

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

ntohl
listen
accept
WSAIoctl
bind
inet_ntoa
ntohs
htons
send
recv
socket
WSAGetLastError
closesocket
setsockopt
__WSAFDIsSet
select
sendto
recvfrom
WSAStartup
WSACleanup
htonl

comctl32

ord6
ord17

iphlpapi

GetAdaptersInfo

netapi32

Netbios

kernel32

SetFilePointer
CreateFileA
WaitForSingleObject
GetModuleFileNameA
GetLocalTime
MoveFileA
GetLastError
DeleteFileA
GetFileSize
GetPrivateProfileStringA
WinExec
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
GetVersion
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OutputDebugStringA
GetModuleHandleA
Beep
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetTickCount
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
VirtualFree
WaitForMultipleObjects
VirtualAlloc
GetComputerNameA
GetPrivateProfileIntA
lstrcmpA
InterlockedExchange
ResetEvent
ReleaseMutex
CreateThread
GetVersionExA
CreateFileMappingA
lstrcpynA
WideCharToMultiByte
lstrlenA
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
MultiByteToWideChar
HeapReAlloc
HeapCreate
RaiseException
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
SetLastError
TlsFree
GetCurrentProcessId
TlsSetValue
TlsAlloc
TlsGetValue
GetFileType
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
RtlUnwind
GetFileAttributesA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleW
GetCurrentThreadId
lstrcatA
CreateMutexA
MapViewOfFile
lstrcpyA
SetEvent
Sleep
UnmapViewOfFile
OpenEventA
OpenFileMappingA
CloseHandle
GetEnvironmentStringsW
QueryPerformanceCounter
FreeEnvironmentStringsW
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap

user32

GetMessageA
LoadAcceleratorsA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
PostQuitMessage
DrawTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
FindWindowA
DialogBoxParamA
PostMessageA
IsIconic
BeginPaint
GetSystemMetrics
GetClientRect
ExitWindowsEx
EndPaint
SetTimer
KillTimer
EndDialog
LoadCursorA
SetCursor
GetCursorPos
SetForegroundWindow
LoadMenuA
GetSubMenu
EnableMenuItem
TrackPopupMenu
DestroyMenu
ShowWindow
EnableWindow
SetFocus
LoadIconA
wsprintfA
LoadImageA
GetDlgItem
SetWindowTextA
SendMessageA
LoadStringA
MessageBoxA
DrawIcon
UpdateWindow

gdi32

DeleteObject

advapi32

OpenSCManagerA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
QueryServiceStatus
ChangeServiceConfigA
StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
OpenServiceA
CloseServiceHandle
DeleteService
CreateServiceA
RegisterEventSourceA
DeregisterEventSource
ReportEventA
RegSetValueExA

shell32

Shell_NotifyIconA

hid

HidD_GetFeature
HidD_FreePreparsedData
HidP_GetCaps
HidD_SetFeature
HidD_FlushQueue
HidD_GetProductString
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

95bad1c06ce23486470fb54c464c1751

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

comctl32

iphlpapi

netapi32

kernel32

user32

gdi32

advapi32

shell32

hid

setupapi

Sections

.text Size: 112KB - Virtual size: 112KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 11KB - Virtual size: 46KB

.rsrc Size: 41KB - Virtual size: 44KB

.text
Size: 112KB - Virtual size: 112KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 11KB - Virtual size: 46KB

.rsrc
Size: 41KB - Virtual size: 44KB