fa228cfb3d7a15e707f3d4a19bb7184d825f9e7946df81e6dc1aeda8e3e0bff1

General

Target

fa228cfb3d7a15e707f3d4a19bb7184d825f9e7946df81e6dc1aeda8e3e0bff1
Size

613KB
MD5

0c31c6394011f62a7e6f85a0a1916e80
SHA1

a8d77da1ec38d0d5eef05320c70ec05cd7cf0c49
SHA256

fa228cfb3d7a15e707f3d4a19bb7184d825f9e7946df81e6dc1aeda8e3e0bff1
SHA512

aad7c0706da46b97b98456f7e90515eacdf5a28a3401958c326b98d32e64f40088bc3cdf077355e03c82d1ebad91908ba7cadd8f78a9d982b51e25bf2f32ea26
SSDEEP

12288:9EEEsPLwtZaJvSwCU718WRpCjCtgp7VGvOBfIZuj9U2PAunb0eWNFB+t1KyNClg0:H/h7Sup5tq7vxIk+ibhWNeCowg0

Score

N/A

Malware Config

Signatures

Files

fa228cfb3d7a15e707f3d4a19bb7184d825f9e7946df81e6dc1aeda8e3e0bff1
.exe windows x86

7ce9954bb4e497a143be40a2912441ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateDCA
DeleteDC
GetDeviceCaps

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetFileSize
GetLastError
GetLogicalDriveStringsA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MoveFileA
MultiByteToWideChar
ReadFile
RtlMoveMemory
RtlZeroMemory
SetFileAttributesA
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
WriteFile
lstrcatA
lstrcpyA
lstrlenA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

shell32

SHGetSpecialFolderPathA
ShellExecuteA

user32

DialogBoxParamA
EndDialog
KillTimer
PostMessageA
SetTimer
SetWindowPos
wsprintfA

ws2_32

accept
bind
closesocket
connect
htons
inet_addr
listen
recv
select
send
socket
WSAStartup
WSACleanup

Sections

.data?
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.res
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.add
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ce9954bb4e497a143be40a2912441ad

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

shell32

user32

ws2_32

Sections

.data? Size: - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.code Size: 7KB - Virtual size: 8KB

.res Size: 28KB - Virtual size: 32KB

.add Size: 31KB - Virtual size: 32KB

.data?
Size: - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.code
Size: 7KB - Virtual size: 8KB

.res
Size: 28KB - Virtual size: 32KB

.add
Size: 31KB - Virtual size: 32KB