3dcef96e2d6509c07ea8f3649c06e1dad0bc8e01504fc6f7c0f5844bfd5e260b

Sharing

Copy URL Twitter E-mail

General

Target

3dcef96e2d6509c07ea8f3649c06e1dad0bc8e01504fc6f7c0f5844bfd5e260b
Size

48KB
MD5

92fbca3994ecfac366141fdb0cd0c5e0
SHA1

e2503e533eb1b31ac7c4273ee5f79d54cddef9d0
SHA256

3dcef96e2d6509c07ea8f3649c06e1dad0bc8e01504fc6f7c0f5844bfd5e260b
SHA512

28764d0a0954fcb93774193761a9494ea524b0dd12f1d543b4f9103e603fc3c4e569b2bc3173af073a4c1ed62104e43eef029ebed57d7f2687cfcf91ee9411ac
SSDEEP

768:oR1WRLH2n+5aJfFN0Zott1TZSjOmQMraDhyRyB8tmKZqWQXB6/:oLWQn+5cU+txEjOCroGtHZqVB6/

Score

N/A

Malware Config

Signatures

Files

3dcef96e2d6509c07ea8f3649c06e1dad0bc8e01504fc6f7c0f5844bfd5e260b
.exe windows x86

e8a4c510768bfeec313420e9e5038d1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
ReleaseMutex
OpenMutexA
lstrlenA
SetThreadPriority
GetLastError
GetCurrentThreadId
GetWindowsDirectoryA
ExitThread
GetTickCount
GetStartupInfoA
CreateProcessA
ResumeThread
GetSystemDefaultUILanguage
GetVersionExA
lstrcpyA
GlobalMemoryStatusEx
GetSystemInfo
GetModuleHandleA
GlobalAlloc
GlobalFree
CreateFileA
SetFilePointer
GetFileSize
WriteFile
Sleep
LoadLibraryA
GetProcAddress
lstrcatA

user32

GetMessageA
GetDesktopWindow
GetInputState
PostThreadMessageA
wsprintfA

advapi32

OpenServiceA
DeleteService
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
RegOpenKeyA

ws2_32

htons
socket
WSAIoctl
closesocket
setsockopt
send
recv
__WSAFDIsSet
select
WSAStartup
connect
gethostbyname
inet_addr
sendto
WSASocketA
WSACleanup
htonl
inet_ntoa

msvcrt

strncmp
_strnicmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
_except_handler3
strncat
strchr
realloc
malloc
__CxxFrameHandler
_CxxThrowException
atoi
strncpy
strcspn
strstr
sprintf
free
rand
??2@YAPAXI@Z
exit
_strrev
??3@YAXPAX@Z
??1type_info@@UAE@XZ
__dllonexit

iphlpapi

GetIfTable

shlwapi

SHDeleteKeyA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

junjun1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

junjun
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8a4c510768bfeec313420e9e5038d1a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

iphlpapi

shlwapi

Sections

.text Size: 4KB - Virtual size: 3KB

junjun1 Size: 16KB - Virtual size: 14KB

junjun Size: 12KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.text
Size: 4KB - Virtual size: 3KB

junjun1
Size: 16KB - Virtual size: 14KB

junjun
Size: 12KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB