e6162e4f92915276dd0ce6d14710404da1853ce6832a519152e6ce64ce4ae864

Sharing

Copy URL

Twitter E-mail

General

Target

e6162e4f92915276dd0ce6d14710404da1853ce6832a519152e6ce64ce4ae864
Size

18KB
MD5

92d7f0664a726dcc421244321996e81b
SHA1

a0d5944e962e78c60b9f96d4bf060096cbb93d7e
SHA256

e6162e4f92915276dd0ce6d14710404da1853ce6832a519152e6ce64ce4ae864
SHA512

de45db6096b118fb47e9032def386c0fd86241f015e45cdc3d470ba7478f2f2d7e934ef7634a1e6cf540ebbf7bffd53fd98b76c9638a6d344b12218d31c7587d
SSDEEP

384:JnFQHUFM9Pch/9Lyfdy3iw4YNUynRJOd231dodTzu4m3dIgFeIRuTNU7:JF7E0h/13iw4MUARJOd231deuom7

Score

N/A

Malware Config

Signatures

Files

e6162e4f92915276dd0ce6d14710404da1853ce6832a519152e6ce64ce4ae864
.exe windows x86

a6c5727a84f94f6f7b075e77d34c7267

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetLastError
SetFileAttributesW
ExpandEnvironmentStringsW
GetVolumeNameForVolumeMountPointW
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
HeapCreate
CreateProcessW
OpenProcess
CreateToolhelp32Snapshot
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
CreateMutexW
ReleaseMutex
SetLastError
SystemTimeToFileTime
GetSystemTime
InterlockedIncrement
InitializeCriticalSection
InterlockedExchange
GetModuleFileNameW
GetSystemDirectoryW
CopyFileW
TerminateProcess
ExitThread
Process32FirstW
Module32FirstW
GetTickCount
CreateThread
ResumeThread
CloseHandle
WaitForMultipleObjects
CreateEventW
Sleep
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
WaitForSingleObject
Process32NextW

shlwapi

wvnsprintfW
PathRemoveBackslashW
PathAddBackslashW
PathRemoveFileSpecW

ws2_32

WSAStartup
connect
WSAIoctl
WSAGetLastError
shutdown
setsockopt
WSACleanup
socket
closesocket
send
WSACloseEvent
getpeername
getaddrinfo
select
WSAEnumNetworkEvents
WSAEventSelect
getsockname
recv
freeaddrinfo
WSACreateEvent
WSAResetEvent
WSAWaitForMultipleEvents

advapi32

RegCreateKeyExW
RegCloseKey
GetLengthSid
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
GetTokenInformation
OpenProcessToken

shell32

SHGetFolderPathW

ole32

StringFromGUID2
CLSIDFromString

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6c5727a84f94f6f7b075e77d34c7267

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ws2_32

advapi32

shell32

ole32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 5KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 5KB