e238bed9c0a415d992cf7b21edfb5c3a88d0ad4519d9a89007a9b447c876e05c

General

Target

e238bed9c0a415d992cf7b21edfb5c3a88d0ad4519d9a89007a9b447c876e05c
Size

80KB
MD5

09204f1751c48b663b677dba95d93320
SHA1

6900045d428b247b90a053665a74da3731024922
SHA256

e238bed9c0a415d992cf7b21edfb5c3a88d0ad4519d9a89007a9b447c876e05c
SHA512

2ac90e5d465fd2689f1cf32a1962c67e6cb9d80d62760de2538af08c6b973c6f25139de86f16de4b8916ceca56d842a5f8eb006ff57e147643c56e044bdb785e
SSDEEP

1536:969F1EVzyasVwg4uMRQS+qVJp4u4KebxJo:CK2as8pr+qVJ6

Score

N/A

Malware Config

Signatures

Files

e238bed9c0a415d992cf7b21edfb5c3a88d0ad4519d9a89007a9b447c876e05c
.exe windows x86

83c270df1265db7afa025fb4f50672ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualFree
VirtualAlloc
GetSystemInfo
IsBadReadPtr
Sleep
TerminateProcess
LoadLibraryA
CreateThread
GetLastError
CreateMutexA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetProcAddress
VirtualProtect
CreateProcessA
GetVersion
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
CloseHandle
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW

user32

MessageBoxA
OpenDesktopA
CreateDesktopA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ws2_32

recv
send
htons
closesocket
setsockopt
connect
gethostbyname
inet_addr
shutdown
WSAStartup
socket
WSACleanup

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wpoxpab
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83c270df1265db7afa025fb4f50672ef

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 44KB

wpoxpab Size: - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 44KB

wpoxpab
Size: - Virtual size: 4KB