ba042952170ebeb293122767a44f19e4e6e743f52c4e5247311dffaf7703daf3

Sharing

Copy URL

Twitter E-mail

General

Target

ba042952170ebeb293122767a44f19e4e6e743f52c4e5247311dffaf7703daf3
Size

35KB
MD5

06170aeb60780e7d21c07f887d32e4d0
SHA1

5c1ccbfc7a838c406b9a1afba70e94ce80beda57
SHA256

ba042952170ebeb293122767a44f19e4e6e743f52c4e5247311dffaf7703daf3
SHA512

bef1fed40f25273b22f8c95e78ad23cea2fc138ccac2a96a14715a62ef7772589010f0062e67a594043813a08a43a9fc4c932a14917e0f9a44091376012241a9
SSDEEP

768:x0mwxXA7N3I8rQDF7tXWPSlOYmbkuf+1NfgAOCsfPVjp:xr8lXDF8gORAw+1atCK

Score

N/A

Malware Config

Signatures

Files

ba042952170ebeb293122767a44f19e4e6e743f52c4e5247311dffaf7703daf3
.exe windows x86

2a32010b0683a00f1a1c6066c0a61901

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

LocalFree
LocalAlloc
Sleep
SetThreadUILanguage
HeapSetInformation
InterlockedExchange
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar

msvcrt

_write
_setmode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_cexit
__getmainargs
exit
atoi
memset
memmove
isprint
_vsnprintf
__p__commode
__p__fmode
_except_handler4_common
?terminate@@YAXXZ
_exit
__set_app_type
_controlfp

ntdll

RtlExtendedLargeIntegerDivide
NtClose
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlUpcaseUnicodeStringToOemString
RtlIpv4AddressToStringA
NtDeviceIoControlFile
NtWaitForSingleObject
RtlInitString
RtlAnsiStringToUnicodeString
NtCreateFile
RtlFreeUnicodeString
RtlGUIDFromString
RtlInitUnicodeString

user32

CharToOemBuffA
OemToCharBuffA

wsock32

ntohl
ioctlsocket
ord1108

iphlpapi

NhGetInterfaceNameFromDeviceGuid

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2a32010b0683a00f1a1c6066c0a61901

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ntdll

user32

wsock32

iphlpapi

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 43KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 43KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 21KB - Virtual size: 21KB