be2985adbd19bc31d64b9f94bc968bcb59c6a466a0eb48989b73e4e0a80300d0

Sharing

Copy URL

Twitter E-mail

General

Target

be2985adbd19bc31d64b9f94bc968bcb59c6a466a0eb48989b73e4e0a80300d0
Size

69KB
MD5

015c38766115fe00651137e6ba64c332
SHA1

6e3456a6a719f54b89768d6b9afb6031f0cab713
SHA256

be2985adbd19bc31d64b9f94bc968bcb59c6a466a0eb48989b73e4e0a80300d0
SHA512

f04c585b20183e32677f9f23c5ea949a94041dcf82be5191018a133e4fc37222a241fb368fa13ce2513cf8b2fbd25716bed6ddba85ab97ebd3416175bbcfdd52
SSDEEP

1536:BDCfpfjEEvpPUY8pQ6WTIO0KRwYwOSlBrtrIxy0:BDmpfYch++TIOgBrtrIxy0

Score

N/A

Malware Config

Signatures

Files

be2985adbd19bc31d64b9f94bc968bcb59c6a466a0eb48989b73e4e0a80300d0
.exe windows x86

1d7a43d7612635eb3be0793215f0383a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
OutputDebugStringA
ReleaseMutex
OpenMutexA
WinExec
GetTempPathA
WaitForSingleObject
CreateThread
CreateMutexA
GetStartupInfoA
GlobalMemoryStatusEx
GetSystemInfo
lstrcpyA
GetVersionExA
GetSystemDefaultUILanguage
ExitThread
GetSystemDirectoryA
GetTickCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
lstrlenA
lstrcatA
HeapAlloc
HeapFree
SetFilePointer
GetModuleHandleA
VirtualFree
CloseHandle
Sleep
TerminateProcess
CreateProcessA
FreeLibrary
LoadLibraryA
GetProcAddress
VirtualAlloc
GetLastError
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
HeapCreate
HeapDestroy
IsBadWritePtr
SetUnhandledExceptionFilter
GetVersion
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc

user32

RegisterClassA
LoadCursorA
LoadIconA
wsprintfA
GetDesktopWindow

gdi32

GetStockObject

advapi32

RegOpenKeyExA
StartServiceCtrlDispatcherA
CreateServiceA
StartServiceA
RegOpenKeyA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey

shell32

SHChangeNotify
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA

ws2_32

htons
socket
htonl
closesocket
setsockopt
shutdown
recv
__WSAFDIsSet
select
send
WSAStartup
WSASocketA
WSAIoctl
connect
gethostbyname
inet_addr
sendto

netapi32

NetUserAdd
NetLocalGroupAddMembers

shlwapi

SHDeleteKeyA

iphlpapi

GetIfTable

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d7a43d7612635eb3be0793215f0383a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

netapi32

shlwapi

iphlpapi

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB