c9e0fcf9403cc5f3089eb34a872eb1ddc6c054a5ec8d7196ab7094d59a17f5f3

General

Target

c9e0fcf9403cc5f3089eb34a872eb1ddc6c054a5ec8d7196ab7094d59a17f5f3
Size

36KB
MD5

fb13cec092850725fc2b8de55c6fc122
SHA1

cb99deed599d53e14bdd87f6abc8936adc0f8456
SHA256

c9e0fcf9403cc5f3089eb34a872eb1ddc6c054a5ec8d7196ab7094d59a17f5f3
SHA512

2b1b1fef8abb5621a8e631cda1bd85c436cb2e06ab91ab652868b9d9f1783d072a774593945804520269e952eb15e662a1090cb2a0c56de38bf320e06064db81
SSDEEP

384:a+CqVS/LVQaryop3s+bAweqkjFqzM16CRBWkGEUvwiL37yiArnnW8xi4tdyoOOuf:fVS/Nyoxsg6FP1NYT37erW8xi4td90N

Score

N/A

Malware Config

Signatures

Files

c9e0fcf9403cc5f3089eb34a872eb1ddc6c054a5ec8d7196ab7094d59a17f5f3
.exe windows x86

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
lstrlenA
GetCurrentThreadId
CreateMutexA
GetLastError
ExitProcess
WaitForSingleObject
CloseHandle
CreateThread
LoadLibraryA
Sleep
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
HeapFree
VirtualFree
GetTickCount
lstrcpyA
lstrcatA
ExitThread
CreateProcessA
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

GetMessageA
GetInputState
wsprintfA
PostThreadMessageA

advapi32

OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA

ws2_32

recv
setsockopt
WSAIoctl
__WSAFDIsSet
socket
connect
closesocket
select
send
WSAStartup
htons
gethostbyname
inet_addr
sendto

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8d3719c0f78b2ccd4ab9d979d64abd0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 920B