f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e

General

Target

f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
Size

34KB
MD5

35cef4d8899d029b91292671489c1d70
SHA1

4fd6705c5797c80cf38316719c10ff0f36eeb149
SHA256

f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
SHA512

6a3e0289b00ed2177345f558db05f38feb6d7d361f02f9ec5323975337ae9b1616a3dff033ebfb6e6dfd9e405b433b43203c1e3b2d5481244906fbaa11dd81cf
SSDEEP

768:AcQhyn/CSQ7JJLQCFNCMhKFZRtEltyF2JbRD+TGseKIfirwp:vQhyn/m7JJLZiMw3TEltyF25t+2ti

Score

N/A

Malware Config

Signatures

Files

f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
.exe windows x86

757e8d75cfec918a71e532c251c1d75c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WriteFile
CreateFileA
LockResource
LoadResource
FindResourceA
EnumResourceNamesA
GetTempPathA
lstrlenA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
CreateMutexA
CopyFileA
GetSystemDirectoryA
GetTickCount
TerminateProcess
ExitThread
WinExec
OpenMutexA
GetLastError
ReleaseMutex
GetModuleFileNameA
SetFileAttributesA
ExitProcess
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetProcAddress
Sleep
GetSystemInfo
GlobalMemoryStatusEx
GetComputerNameA
GetSystemDefaultUILanguage
LoadLibraryA
EndUpdateResourceA
GetStartupInfoA
GetModuleHandleA

user32

ExitWindowsEx
wsprintfA

advapi32

SetServiceStatus
CreateServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ws2_32

__WSAFDIsSet
recv
htons
select
closesocket
send
WSAStartup
socket
inet_addr
WSACleanup
sendto
htonl
inet_ntoa
gethostbyname
connect
setsockopt
WSAIoctl

msvcrt

__getmainargs
strchr
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
realloc
malloc
strstr
atoi
strncpy
strcspn
exit
sprintf
localtime
time
strncmp
_except_handler3
_exit
_XcptFilter
_acmdln
??2@YAPAXI@Z
_initterm
__setusermatherr
_adjust_fdiv

Sections

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

757e8d75cfec918a71e532c251c1d75c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Sections

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 9KB - Virtual size: 8KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 9KB - Virtual size: 8KB