687b8de270a515d14875aa0157c8d98941438573e10ff1ff42a0413531325719

General

Target

687b8de270a515d14875aa0157c8d98941438573e10ff1ff42a0413531325719
Size

204KB
MD5

0edfbb927bcedf1893b11d3742157266
SHA1

890e32f96368a58d26d447cd39e1e4f93e7d1279
SHA256

687b8de270a515d14875aa0157c8d98941438573e10ff1ff42a0413531325719
SHA512

ea8406ff3f0075027ba8b39b51d1c8bd18efd3bb3e4ec0219f25b2a621e421bc1139b24d1a8e157767090759858489f5ed0c728cc6fd1cd1a4fe4d67a371d376
SSDEEP

3072:EffCVcPh7HffE5GrLlI4uBELmgVUyAG6eT0IpYG3QY+sJC60VEL0X:EXAwR/s50a3pgqk6eT0Qz36H60V5X

Score

N/A

Malware Config

Signatures

Files

687b8de270a515d14875aa0157c8d98941438573e10ff1ff42a0413531325719
.exe windows x86

77cb7a27d45f17293359d16189d36cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
CreateEventA
GetSystemDirectoryA
GetModuleFileNameA
GetPrivateProfileStringA
LockResource
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
ReadFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetFilePointer
GetLastError
SetUnhandledExceptionFilter
IsBadWritePtr
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

shell32

ShellExecuteA

ws2_32

inet_addr
htons
socket
connect
closesocket
send
recv
WSAStartup
gethostbyname

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77cb7a27d45f17293359d16189d36cc9

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 120KB - Virtual size: 116KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 120KB - Virtual size: 116KB