70d9340c72fe32b0732d5ebcb1ae5849dd18634226cc75ccdd64191bf876c091

Sharing

Copy URL

Twitter E-mail

General

Target

70d9340c72fe32b0732d5ebcb1ae5849dd18634226cc75ccdd64191bf876c091
Size

156KB
MD5

8491bc37746fb596b14a17a97308fc00
SHA1

a7c41cd7eec4784447c0a295522d94bf86bab8b1
SHA256

70d9340c72fe32b0732d5ebcb1ae5849dd18634226cc75ccdd64191bf876c091
SHA512

392ccfb3cbebe1870a789d283198014a107482271a3cad5b4bc1f58ad5571bec3753e436c98813f15051b766e7ca1574f01580f11195e33f271dcf9d20d72412
SSDEEP

3072:HzevMTbFAoIqRt21sfE2LAMbBhXxpB8fZouFHN:HcMTbPIzUE2LHB8Ht

Score

N/A

Malware Config

Signatures

Files

70d9340c72fe32b0732d5ebcb1ae5849dd18634226cc75ccdd64191bf876c091
.exe windows x86

5ef7306e323e741336c4f2e3dbd8a668

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

shutdown
connect
closesocket
socket
WSACleanup
WSAStartup
WSACloseEvent
WSAResetEvent
WSAGetOverlappedResult
WSAWaitForMultipleEvents
WSARecv
WSACreateEvent
WSAGetLastError
getsockopt
WSASend

kernel32

LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
LoadLibraryA
CreateMutexW
CreateEventW
CreateFileW
CreateThread
SetThreadPriority
CancelIo
DisconnectNamedPipe
ReleaseMutex
SetEvent
WaitForSingleObject
ReadFile
TerminateThread
GetLastError
CloseHandle
HeapFree
WaitForMultipleObjects
HeapSize
lstrlenW
ResetEvent
ExitThread
GetOverlappedResult
HeapValidate
WriteFile
PeekNamedPipe
GetProcessHeap
ConnectNamedPipe
HeapAlloc
IsBadCodePtr
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCurrentThreadId
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameW
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameA
GetEnvironmentStrings

user32

DefWindowProcW
DispatchMessageW
RegisterClassExW
CreateWindowExW
PostMessageW
PostQuitMessage
GetMessageW
UnregisterClassW
UpdateWindow
ShowWindow

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

ole32

StringFromCLSID
CLSIDFromString
CoTaskMemFree

oleaut32

SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5ef7306e323e741336c4f2e3dbd8a668

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.vrdata Size: 68KB - Virtual size: 68KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.vrdata
Size: 68KB - Virtual size: 68KB