3a9c6fff4f02af44fea5a83c7bbaecf27bcffa428ceda9f734a0c0aba87c0f83

General

Target

3a9c6fff4f02af44fea5a83c7bbaecf27bcffa428ceda9f734a0c0aba87c0f83
Size

36KB
MD5

0a9f8ef9a45b6c211eee0336e1532fd5
SHA1

bc5181a447317e7a1f88f7b186910f792e5aeb16
SHA256

3a9c6fff4f02af44fea5a83c7bbaecf27bcffa428ceda9f734a0c0aba87c0f83
SHA512

18c77e9c5417b33f0c3d91d7832e69b4b605c5421a05638c89ad860732f2cf71f855558d48b0570ec541336787673528b8c8fb8f5b8ceb972f3382dd32e8c2ac
SSDEEP

768:j/uueAgeGgZVr/q2KUkT8CpvKPLjTLCjrH/JXoznDGKBNr4w:8tgZh/qaEF5oznDGfw

Score

N/A

Malware Config

Signatures

Files

3a9c6fff4f02af44fea5a83c7bbaecf27bcffa428ceda9f734a0c0aba87c0f83
.exe windows x86

81182d2ca21b46573686d79cca3474d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetTickCount
GetVersionExA
GlobalMemoryStatus
CopyFileA
LoadLibraryA
Process32First
Process32Next
CreateFileA
RtlUnwind
Sleep
TerminateThread
CreateProcessA
WriteFile
CreateThread
CreateToolhelp32Snapshot

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA

crtdll

__GetMainArgs
atoi
exit
free
malloc
memset
raise
rand
signal
sprintf
srand
strcat
strchr
strcmp
strlen
strncmp
strncpy
strstr
strtok

shell32

ShellExecuteA

wininet

InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetReadFile

wsock32

WSAAsyncSelect
WSACleanup
WSAStartup
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
getsockname
htons
inet_addr
inet_ntoa
listen
ntohs
recv
send
sendto
socket

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rebld_i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81182d2ca21b46573686d79cca3474d7

Headers

File Characteristics

Imports

kernel32

advapi32

crtdll

shell32

wininet

wsock32

Sections

.text Size: 26KB - Virtual size: 26KB

.bss Size: - Virtual size: 29KB

.data Size: 3KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.rebld_i Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.bss
Size: - Virtual size: 29KB

.data
Size: 3KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.rebld_i
Size: 1KB - Virtual size: 1KB