3d31848dc60111718ed340fa5fce48c156cc5c22d11a4d7acb2c9146d57f9e5c

Sharing

Copy URL Twitter E-mail

General

Target

3d31848dc60111718ed340fa5fce48c156cc5c22d11a4d7acb2c9146d57f9e5c
Size

96KB
MD5

048064ac8458792d89258a5c9ae61220
SHA1

6d0d8d96d7818b1932c5774dbe7fe52698536509
SHA256

3d31848dc60111718ed340fa5fce48c156cc5c22d11a4d7acb2c9146d57f9e5c
SHA512

1d103950279c25e2d12e86ebf3295210f2e3f1235e84835aab9969a3a19e85455e73084dbfe23968e0fdad0d385cff5c26affb9fa213f32abc4b5ae67f3db842
SSDEEP

1536:W/6EOcAMMAdtF6hz1tI9lrxrgxLhyohkNQ1O7sT+3Q98/Z6x2exsNtF:Rczdt8TiYxFhhOQJN6NtF

Score

N/A

Malware Config

Signatures

Files

3d31848dc60111718ed340fa5fce48c156cc5c22d11a4d7acb2c9146d57f9e5c
.exe windows x86

67b3dd00100dfaae410b8b1dffd3f224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateAcceleratorTableA

advapi32

CloseServiceHandle
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
DeleteService
ControlService
ChangeServiceConfigA
StartServiceA
RegEnumValueA
RegCreateKeyExA

ws2_32

sendto
WSAStartup
inet_addr
recv
send
inet_ntoa
gethostbyname
socket
htons
setsockopt
closesocket
connect
WSAGetLastError
WSACleanup

wininet

HttpSendRequestA
InternetReadFile
InternetConnectA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
HttpOpenRequestA

dnsapi

DnsRecordListFree
DnsQuery_A

kernel32

GetCurrentThreadId
GetTickCount
GetCurrentProcessId
SetStdHandle
InterlockedExchange
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
VirtualAlloc
SetFilePointer
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
HeapSize
HeapAlloc
HeapReAlloc
FlushFileBuffers
QueryPerformanceCounter
GetCurrentProcess
GetLastError
Sleep
GetVersionExA
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetThreadContext
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
CreateProcessA
ReadFile
GlobalFree
CopyFileA
CreateThread
GlobalAlloc
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateMutexA
GetLocalTime
OpenMutexA
GetVolumeInformationA
ExitProcess
TerminateProcess
RtlUnwind
RaiseException
CreateDirectoryA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapFree
SetUnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67b3dd00100dfaae410b8b1dffd3f224

Headers

File Characteristics

Imports

user32

advapi32

ws2_32

wininet

dnsapi

kernel32

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 12KB