994daa9140b81acb93441575155399b275a157cb7db9cca97d35e33b39ca7ba3

General

Target

994daa9140b81acb93441575155399b275a157cb7db9cca97d35e33b39ca7ba3
Size

34KB
MD5

9553e42be92210eeba1731084ef062ae
SHA1

7d0bc2b3287ef326cc7d1ef246f67abb51f3d1bc
SHA256

994daa9140b81acb93441575155399b275a157cb7db9cca97d35e33b39ca7ba3
SHA512

0064d8e7617d98d769660f147f85691c07876937d26fdcbe9ddc69e4fd041319783ac2a541b79728fa57260aaa6d1f25708e58ef3136b02094cbf492795bab0e
SSDEEP

768:AUUhyn/qmXBJwbRVOIV/qlR6glQ2JbRDDKseKffirw+:fUhyn/lBJcRVLZiUglQ25tq8i

Score

N/A

Malware Config

Signatures

Files

994daa9140b81acb93441575155399b275a157cb7db9cca97d35e33b39ca7ba3
.exe windows x86

757e8d75cfec918a71e532c251c1d75c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WriteFile
CreateFileA
LockResource
LoadResource
FindResourceA
EnumResourceNamesA
GetTempPathA
lstrlenA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
CreateMutexA
CopyFileA
GetSystemDirectoryA
GetTickCount
TerminateProcess
ExitThread
WinExec
OpenMutexA
GetLastError
ReleaseMutex
GetModuleFileNameA
SetFileAttributesA
ExitProcess
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetProcAddress
Sleep
GetSystemInfo
GlobalMemoryStatusEx
GetComputerNameA
GetSystemDefaultUILanguage
LoadLibraryA
EndUpdateResourceA
GetStartupInfoA
GetModuleHandleA

user32

ExitWindowsEx
wsprintfA

advapi32

SetServiceStatus
CreateServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ws2_32

__WSAFDIsSet
recv
htons
select
closesocket
send
WSAStartup
socket
inet_addr
WSACleanup
sendto
htonl
inet_ntoa
gethostbyname
connect
setsockopt
WSAIoctl

msvcrt

__getmainargs
strchr
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
realloc
malloc
strstr
atoi
strncpy
strcspn
exit
sprintf
localtime
time
strncmp
_except_handler3
_exit
_XcptFilter
_acmdln
??2@YAPAXI@Z
_initterm
__setusermatherr
_adjust_fdiv

Sections

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

757e8d75cfec918a71e532c251c1d75c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Sections

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 9KB - Virtual size: 8KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 9KB - Virtual size: 8KB