8c14f1a8243bf543ca3371981a9cc6b585cf882445d9ea5bff45db36d777e285

General

Target

8c14f1a8243bf543ca3371981a9cc6b585cf882445d9ea5bff45db36d777e285
Size

56KB
MD5

fb012206faeab90d75ecf17c0a6f38f6
SHA1

3cfc6b89600e9bf601f0be9d9e1d973f55672bc2
SHA256

8c14f1a8243bf543ca3371981a9cc6b585cf882445d9ea5bff45db36d777e285
SHA512

8017497616cd7116c9a76805035189d54485df6abb21b1b4d5961b50eb12c127c1cb2b11964219b4ff340c9f7bf3a207ab15bbea222448799038baf775876461
SSDEEP

768:TxHXFGBrc8NqQtz7CKP3rFWTk7v5oSSq7n/ut8cue9p6quwYDl:TxHXFGNKKPbFWTGRXSqb/uNNxWl

Score

N/A

Malware Config

Signatures

Files

8c14f1a8243bf543ca3371981a9cc6b585cf882445d9ea5bff45db36d777e285
.exe windows x86

a27315f40dc95eb381a39e290789a6ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
lstrcpyA
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
WaitForSingleObject
CloseHandle
CreateThread
Sleep
GetCurrentProcessId
GetLastError
GetTickCount
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetEnvironmentVariableA
HeapReAlloc
VirtualAlloc
SetFilePointer
WriteFile
HeapFree
VirtualFree
HeapCreate
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy

advapi32

CreateServiceA
OpenServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

WSAStartup
gethostbyname
select
__WSAFDIsSet
recv
WSAIoctl
socket
send
gethostname
inet_ntoa
connect
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr

iphlpapi

GetIfTable

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a27315f40dc95eb381a39e290789a6ca

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

iphlpapi

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB