a0d5c5c345ce0f5814ae61cb46ea07071e29a9d3cca060e76276111c9bb5acb4

General

Target

a0d5c5c345ce0f5814ae61cb46ea07071e29a9d3cca060e76276111c9bb5acb4
Size

84KB
MD5

2171fb572e052846c93e098b100ff560
SHA1

0d957d7cc186594b7d3aab9cc829aee9e7545a3f
SHA256

a0d5c5c345ce0f5814ae61cb46ea07071e29a9d3cca060e76276111c9bb5acb4
SHA512

91bade4a4923b65efa8fb3fde0390d493e91323a32e20f508c4415c72651316e1781862d39e1a61d6841374bc3897024177bc20529d77e296548522b1b0d5e1f
SSDEEP

1536:OfruUtdLzmucYPkRLTPP3Pso7RN64A6Y:KuUtLMFTnH7Rc4A6Y

Score

N/A

Malware Config

Signatures

Files

a0d5c5c345ce0f5814ae61cb46ea07071e29a9d3cca060e76276111c9bb5acb4
.exe windows x86

14bd796fd8af40dc912ce2344e62ffed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetModuleFileNameA
CreateMutexA
ReleaseMutex
CloseHandle
WaitForSingleObject
GetModuleHandleA
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetProcAddress
VirtualQuery
VirtualProtect

user32

MessageBoxA
wsprintfA

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

ws2_32

WSACleanup
WSAStartup

msvcrt

fopen
fread
??3@YAXPAX@Z
malloc
fseek
free
??2@YAPAXI@Z
strstr
strrchr
strncmp
strchr
realloc
sprintf
fclose
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_c_exit
ftell
_stricmp
_strdup
_memccpy

Exports

Exports

CreateInterface

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 128.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14bd796fd8af40dc912ce2344e62ffed

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 128.0MB

.rsrc Size: 4KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 128.0MB

.rsrc
Size: 4KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB

.rmnet
Size: 60KB - Virtual size: 60KB