c558fcfbbedcf823019543ea1385e87a8d263d8976010d21aa9ddbc0204a951b

General

Target

c558fcfbbedcf823019543ea1385e87a8d263d8976010d21aa9ddbc0204a951b
Size

157KB
MD5

762e5db2dc95ddef3df438d7b873c032
SHA1

13cc6e03c7b6d4eeee2c23a36633687df5423682
SHA256

c558fcfbbedcf823019543ea1385e87a8d263d8976010d21aa9ddbc0204a951b
SHA512

d252dffbe3e051bfa573262b7f69ca140e2a3a0409c655c329b195bcfa58631a837677180f1d361123eb4f7af13b04d426a7f7e5be838a8362d2f4750755483e
SSDEEP

3072:5zf4xI1SBMVIOPZJGJtZn05xHoJp+zpFBPWJRLuvVVaaf1/gqVLY76UaietKtb:58i1SGtxJ8T05xOdRLuTtfeQYuUj2y

Score

N/A

Malware Config

Signatures

Files

c558fcfbbedcf823019543ea1385e87a8d263d8976010d21aa9ddbc0204a951b
.exe windows x86

9d9a0ed8ebd15304af518075bbb2c263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStartupInfoA
LocalFree
lstrcpynW
FormatMessageW
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
GetVersion
lstrcmpW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA

user32

wvsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
DispatchMessageA
GetDesktopWindow
MsgWaitForMultipleObjects
ReleaseDC
GetDC
wsprintfA
CreateDialogParamA
PeekMessageA
DestroyWindow
ShowWindow

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ws2_32

WSARecv

oleaut32

VariantClear
SafeArraySetRecordInfo
SetErrorInfo
SetErrorInfo
SysFreeString
GetErrorInfo

Sections

.text
Size: 67KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d9a0ed8ebd15304af518075bbb2c263

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

oleaut32

Sections

.text Size: 67KB - Virtual size: 119KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 84KB - Virtual size: 83KB

.reloc Size: 512B - Virtual size: 308B

.text
Size: 67KB - Virtual size: 119KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 84KB - Virtual size: 83KB

.reloc
Size: 512B - Virtual size: 308B