5f18b15d2e57e4bb45860f10cf438222e4014a69e5f9ed9b3177e846092e0e2f

General

Target

5f18b15d2e57e4bb45860f10cf438222e4014a69e5f9ed9b3177e846092e0e2f
Size

136KB
MD5

93c899022206540058a7feb072740991
SHA1

526e1c4e83698e885bdafc099edbd4fa9ddd9cd2
SHA256

5f18b15d2e57e4bb45860f10cf438222e4014a69e5f9ed9b3177e846092e0e2f
SHA512

689262cf9d8fb966b514ef4401b0d0140b997440e659a659f7b6c7fddf173b73b38afb64f488ae517a45f30274e44af7cb1495319b0cc96186012fb23e8b3457
SSDEEP

3072:PHUB6ZnlMTBfDuWoFAASDADeak7dJHB/AdGh:PHUMZlMTBruMASsQLH5Ads

Score

N/A

Malware Config

Signatures

Files

5f18b15d2e57e4bb45860f10cf438222e4014a69e5f9ed9b3177e846092e0e2f
.exe windows x86

0c09f85f3e03ec58a6e6b6dd4a18fa52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetLocalTime
SetLastError
GetLastError
Thread32Next
TerminateThread
CloseHandle
Thread32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
Process32Next
TerminateProcess
OpenProcess
Process32First
GetCurrentProcessId
GetShortPathNameA
GetFullPathNameA
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
ReadFile
GetFileSize
CreateFileA
WriteFile
CopyFileA
SetFileTime
CreateProcessA
WritePrivateProfileStringA
GetTickCount
SetCurrentDirectoryA
GetModuleFileNameA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetEndOfFile
RtlUnwind
GetFileType
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle

ws2_32

closesocket
recv
inet_addr
gethostbyname
WSASetLastError
htons
connect
WSAStartup
socket
send

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c09f85f3e03ec58a6e6b6dd4a18fa52

Headers

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 44KB - Virtual size: 41KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 44KB - Virtual size: 41KB