c1c6cca3916d12c21296035121ba113ea86b0a6779c1b6f4263219e6ddc9e3fa

Sharing

Copy URL Twitter E-mail

General

Target

c1c6cca3916d12c21296035121ba113ea86b0a6779c1b6f4263219e6ddc9e3fa
Size

49KB
MD5

7bbda744db5bff4e83cd671a27d2b53a
SHA1

5a41296b99de8fb5543d2d763f8f695178293b71
SHA256

c1c6cca3916d12c21296035121ba113ea86b0a6779c1b6f4263219e6ddc9e3fa
SHA512

104ca0c8b756e555aee4940a893bd0c749ad9bac56d9cbbd42ee231709c3c554fbf537cd4a0554516cf3273fe021d369b78ca0218383c3f31e59f8c2e3090be9
SSDEEP

768:4Tk0UIp+EU4MxMtNXrFiAWFcIkEkyOU49yQO/FQ3OdnjauyKs:p0UkUMtwc1HyJqy7NGy+Ks

Score

N/A

Malware Config

Signatures

Files

c1c6cca3916d12c21296035121ba113ea86b0a6779c1b6f4263219e6ddc9e3fa
.exe windows x86

cc5e376100e2d031c801973d75540c59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
WaitForSingleObject
SetPriorityClass
CreateMutexA
lstrlenA
CopyFileA
CreateDirectoryA
CompareStringW
CompareStringA
GetCurrentThread
SetThreadPriority
WinExec
CreateProcessA
CreateFileA
WriteFile
CloseHandle
CreateThread
GetVersionExA
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetLastError
Sleep
GetLocalTime
ExitProcess
GetTickCount
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
MultiByteToWideChar
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
TerminateProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA

user32

wsprintfA

advapi32

OpenSCManagerA
CreateServiceA
LockServiceDatabase
ChangeServiceConfig2A
UnlockServiceDatabase
OpenServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

ws2_32

__WSAFDIsSet
recv
ioctlsocket
select
setsockopt
closesocket
WSAStartup
htons
socket
send
connect
WSACleanup
inet_addr
gethostbyname
WSAIoctl
sendto

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

iphlpapi

GetAdaptersInfo
GetIfTable

Exports

Exports

PluginMe

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cc5e376100e2d031c801973d75540c59

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

wininet

iphlpapi

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 18KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 18KB