d31508604289bec651539214e3072652ec9a8bc947fb7965a373de9c3b9f347a

General

Target

d31508604289bec651539214e3072652ec9a8bc947fb7965a373de9c3b9f347a
Size

56KB
MD5

82cefed662d2d184a35ff95e862b3bf0
SHA1

32ae9438a0d07a0e3518cd2df305effdf135ab09
SHA256

d31508604289bec651539214e3072652ec9a8bc947fb7965a373de9c3b9f347a
SHA512

232ec3e088aa504f666913e963f0b7e0e7b050ae8d4f3a17485acdaf1dd7392a3ff19fbe289f714e177c8cd67a5c88e647c7896387206113cf4e0ea2e02c4ef0
SSDEEP

768:ir2SnPY19i+PkasT5xNStt+bUxA88o1Rc6tfZB:yBQM5/SmbP8fFtBB

Score

N/A

Malware Config

Signatures

Files

d31508604289bec651539214e3072652ec9a8bc947fb7965a373de9c3b9f347a
.exe windows x86

2d1cafd815da4e7c19419bc9ebfc1da2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileA
CreateThread
LoadLibraryA
GetProcAddress
CopyFileA
GetCurrentProcessId
GetTickCount
WaitForSingleObject
Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
IsBadWritePtr
HeapReAlloc
VirtualAlloc
SetFilePointer
GetLastError
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW

advapi32

OpenServiceA
DeleteService
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

gethostbyname
select
__WSAFDIsSet
recv
WSAIoctl
socket
connect
send
gethostname
inet_ntoa
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr

iphlpapi

GetIfTable

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d1cafd815da4e7c19419bc9ebfc1da2

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

iphlpapi

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB