6541edadd8a37d0d0047bfe2076f68245aa57407dad4cf7a33a88f895339be89

General

Target

6541edadd8a37d0d0047bfe2076f68245aa57407dad4cf7a33a88f895339be89
Size

18KB
MD5

cd7fffb188db1c96e7a9923505d6448f
SHA1

b93f43f87806c0a28417b73859a8232d1e0a7fe3
SHA256

6541edadd8a37d0d0047bfe2076f68245aa57407dad4cf7a33a88f895339be89
SHA512

bf603c9543abf7e02ac3fc378938fddc0c627b639380037e412a5eeb404b28f68a649e65d2cefa67935ac636df6c7117253f2985c404791da2fb9c9c22ab325d
SSDEEP

384:3lsfhHOrbhjdePGmUcztDw9h2evbqz1J5foO9OOuK+nvs:3lsfxOXhjdWVztDwievbgJ5rT

Score

N/A

Malware Config

Signatures

Files

6541edadd8a37d0d0047bfe2076f68245aa57407dad4cf7a33a88f895339be89
.exe windows x86

bfe18e300999cdb0b67e9c96ceec38ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WaitForSingleObject
GetStartupInfoA
CloseHandle
CreateThread
GetSystemInfo
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
GetCurrentProcessId
ExitThread
Sleep
LoadLibraryA
GetProcAddress
GetTickCount
GetModuleHandleA

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ws2_32

__WSAFDIsSet
recv
send
socket
connect
gethostname
inet_ntoa
WSASocketA
select
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
WSAGetLastError
WSAStartup

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
??3@YAXPAX@Z
atoi
time
localtime
??2@YAPAXI@Z
_except_handler3
strcpy
strcat
memset
strlen
rand
sprintf
printf
fprintf
_iob
memcpy
_local_unwind2
_ftol
free
malloc
strstr

iphlpapi

GetIfTable

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfe18e300999cdb0b67e9c96ceec38ae

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

iphlpapi

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB