d7ddeadd0f5f22917cc4245cfc60bdab89fd53f0cb1e23d4c374f85b800d97e2

General

Target

d7ddeadd0f5f22917cc4245cfc60bdab89fd53f0cb1e23d4c374f85b800d97e2
Size

56KB
MD5

09c94ebc7a8c37b02af35bcaf8518071
SHA1

a032b5b192ccdb9560d62cd0e9ae59a2bb78acb0
SHA256

d7ddeadd0f5f22917cc4245cfc60bdab89fd53f0cb1e23d4c374f85b800d97e2
SHA512

fa11764e79cdf089e1c2ad4fdbec15d3877b55329ed19730547716db23c9d5a7b9aef664566f4da37bf2bf7cec4583bf7fa55fe408a82d57185fa8eafa7eab12
SSDEEP

768:TxHXFGBrc8NqQtz7CKP3rFWTk7v5oSSq7n/ut8cue9p6quwYDl:TxHXFGNKKPbFWTGRXSqb/uNNxWl

Score

N/A

Malware Config

Signatures

Files

d7ddeadd0f5f22917cc4245cfc60bdab89fd53f0cb1e23d4c374f85b800d97e2
.exe windows x86

a27315f40dc95eb381a39e290789a6ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
lstrcpyA
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
WaitForSingleObject
CloseHandle
CreateThread
Sleep
GetCurrentProcessId
GetLastError
GetTickCount
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetEnvironmentVariableA
HeapReAlloc
VirtualAlloc
SetFilePointer
WriteFile
HeapFree
VirtualFree
HeapCreate
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy

advapi32

CreateServiceA
OpenServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

WSAStartup
gethostbyname
select
__WSAFDIsSet
recv
WSAIoctl
socket
send
gethostname
inet_ntoa
connect
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr

iphlpapi

GetIfTable

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a27315f40dc95eb381a39e290789a6ca

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

iphlpapi

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB