software[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

software.exe
Size

136KB
MD5

207e6f51489a897991888a38efa3acd6
SHA1

1fb9b8115d74cf38d6a90b9049c73ea6eb743643
SHA256

0dc0da0739b227a9dae83be93d1b232c645dbffc7499709ae05c4ffa1bf44000
SHA512

04ccdb65893feae417da5f43b252616dd8c20629e82a63bcd20ca34d0ea8a7b0823ba3425f9c5c5d7010b6ed8be524b430677500bf1b9306173089afd76d8140
SSDEEP

3072:F/ZYDaoAN6vHt5pmXcQ8QAjD44vcbl4ewhp891H9EZfTd3zHZ0DELbTI:qlmXcQHA0JdSpq1eV50DErI

Score

N/A

Malware Config

Signatures

Files

software.exe
.exe windows x86

8a0a6f4b72306b0622a3021bfabc24ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptStringToBinaryA

comctl32

InitCommonControlsEx

wininet

HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetReadFile

mpr

WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum

kernel32

GetSystemInfo
GetVersionExW
GetModuleHandleA
lstrcpyA
GetProcAddress
ExitProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VirtualFree
lstrlenA
GetVolumePathNameW
GetCommandLineW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetFileSize
QueryDosDeviceW
ReadFile
GetTempPathW
CreateMutexW
CreateProcessA
Process32NextW
IsWow64Process
GetModuleFileNameA
GetModuleFileNameW
SetVolumeMountPointW
Process32FirstW
VirtualAlloc
GetDiskFreeSpaceW
GetVolumeInformationW
WaitForMultipleObjects
lstrcmpiW
GetSystemTime
GetWindowsDirectoryW
lstrcatW
lstrcatA
GetLastError
Sleep
CreateFileW
WriteFile
lstrlenW
lstrcpyW
CreateThread
GetLogicalDriveStringsW
GetDriveTypeW
lstrcmpW
GetProcessHeap
CloseHandle
HeapReAlloc
Wow64DisableWow64FsRedirection
OpenProcess
WaitForSingleObject
GetCurrentProcess
GetComputerNameExW

user32

LoadMenuW
DestroyWindow
GetDC
SetWindowPos
CreateWindowExW
SendMessageW
RegisterClassExW
TrackPopupMenu
GetSubMenu
ShowWindow
DispatchMessageW
SetTimer
GetMessageW
SetLayeredWindowAttributes
TranslateMessage
SetWindowLongW
CheckMenuItem
GetClientRect
PostQuitMessage
RegisterWindowMessageW
SetForegroundWindow
ReleaseDC
GetCursorPos
BeginPaint
GetDesktopWindow
wsprintfW
DefWindowProcW
GetWindowLongW
wsprintfA
DrawTextW
SystemParametersInfoW
DestroyMenu
EndPaint

gdi32

DeleteDC
CreateFontW
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
SetBkColor
SetBkMode
GetStockObject
TextOutW
GetTextExtentPoint32W
DeleteObject
CreateDIBSection
SetTextColor

advapi32

RegQueryValueExW
RegSetValueExW
SystemFunction036
RegCloseKey
RegOpenKeyExW
RegQueryValueExA

shell32

SHBrowseForFolderW
SHEmptyRecycleBinW
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
Shell_NotifyIconW

ws2_32

ntohl
inet_addr
setsockopt
socket
gethostbyname
sendto
htons
bind
WSACleanup
WSAStartup
inet_ntoa

iphlpapi

SendARP
GetAdaptersAddresses

netapi32

NetApiBufferFree
NetShareEnum

Sections

.flat
Size: 512B - Virtual size: 333B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a0a6f4b72306b0622a3021bfabc24ea

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

comctl32

wininet

mpr

kernel32

user32

gdi32

advapi32

shell32

ws2_32

iphlpapi

netapi32

Sections

.flat Size: 512B - Virtual size: 333B

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 608B

.flat
Size: 512B - Virtual size: 333B

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 608B