77db757e425ca53bfa620b06bf37dab06c2cf7017441e753f7ae8b7f1ab6c6e7

General

Target

77db757e425ca53bfa620b06bf37dab06c2cf7017441e753f7ae8b7f1ab6c6e7
Size

108KB
MD5

0f097d51b64995882869e94c07772199
SHA1

06b7946f4fc07b9cac7fe33b0a2afe5d9778d7c0
SHA256

77db757e425ca53bfa620b06bf37dab06c2cf7017441e753f7ae8b7f1ab6c6e7
SHA512

015337e5a23dcb8ff416b27165955dabfe76c64e8042baedf7b3d7f1d5c609aef2ea620204a2813c14c5fd277ee05da13b243520f70981cb46c9b3dc4767b3f0
SSDEEP

1536:W++Zt/XuFcuqr0baKk/mF9JAUwsZTPuhKbWLmnRFRce6VLrSjjw9U:WHZt/XuFcAbaKkwaU944WLmnfRn4icU

Score

N/A

Malware Config

Signatures

Files

77db757e425ca53bfa620b06bf37dab06c2cf7017441e753f7ae8b7f1ab6c6e7
.exe windows x86

b4936ad59a50ce716ebe9d0026530f2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrcpyA
lstrcatA
GetSystemDirectoryA
Sleep
ExitThread
TerminateProcess
CreateProcessA
CreateThread
GetProcAddress
LoadLibraryA
WinExec
GetTempPathA
SetFileAttributesA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
OpenMutexA
WaitForSingleObject
GetLocaleInfoW
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
WriteFile
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW

user32

GetDesktopWindow
wsprintfA

shell32

SHGetSpecialFolderPathA

ws2_32

WSASocketA
WSAStartup
send
setsockopt
sendto
recv
gethostbyname
socket
htons
connect
closesocket
htonl
WSAIoctl
__WSAFDIsSet
select
inet_addr

Sections

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4936ad59a50ce716ebe9d0026530f2a

Headers

File Characteristics

Imports

kernel32

user32

shell32

ws2_32

Sections

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 60KB - Virtual size: 64KB

.rsrc Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 60KB - Virtual size: 64KB

.rsrc
Size: 36KB - Virtual size: 36KB