6831336be058b48c55e86fef5a03165569aded294e8b764f916e1426337903cc

General

Target

6831336be058b48c55e86fef5a03165569aded294e8b764f916e1426337903cc
Size

15KB
MD5

eb3bf8eba15a646783cdd4c43682ec52
SHA1

66e92508cadad8e8e05523f3b5bc13798e982f54
SHA256

6831336be058b48c55e86fef5a03165569aded294e8b764f916e1426337903cc
SHA512

2cd7b3524c508d658000caa9dbbf2633ea90e5ccf2affb9ec5f16aecc1d6b4a0e9f54eb28aa65c2c4c579acfcb47ef2586562abf204bd806a3db316a28a9eb59
SSDEEP

384:sma2UYMotpdM6bdrzqX00Uz87T+YV21MgmoO9OOuK+Pvs:xa2xpdM6bdB0a87T+YKMgoH

Score

N/A

Malware Config

Signatures

Files

6831336be058b48c55e86fef5a03165569aded294e8b764f916e1426337903cc
.exe windows x86

2bbbfe0806541be452fc410a5dece979

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WaitForSingleObject
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateThread
GetSystemDefaultUILanguage
GetCurrentProcessId
ExitThread
LoadLibraryA
Sleep
GetProcAddress
WinExec
FreeLibrary
GetTickCount

user32

wsprintfA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA

ws2_32

__WSAFDIsSet
recv
send
socket
connect
gethostname
inet_ntoa
WSASocketA
select
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
WSAGetLastError
WSAStartup

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atoi
time
localtime
strstr
_except_handler3
strcpy
memset
strlen
rand
sprintf
printf
fprintf
_iob
memcpy
_local_unwind2
strncpy
??2@YAPAXI@Z

iphlpapi

GetIfTable

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bbbfe0806541be452fc410a5dece979

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

iphlpapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB