0c74b7e8e930829410e6d50c3cab922522b9fe39bdc9c612cfadb1f2fc5c86cf

Sharing

Copy URL

Twitter E-mail

General

Target

0c74b7e8e930829410e6d50c3cab922522b9fe39bdc9c612cfadb1f2fc5c86cf
Size

129KB
MD5

0c293048251ae48b3c46fc4056099f21
SHA1

c5016d24925bb25ab97e534962a9cbe80230ae24
SHA256

0c74b7e8e930829410e6d50c3cab922522b9fe39bdc9c612cfadb1f2fc5c86cf
SHA512

04d6ab4c0198fec340c6dff904b938193cc729341772eab0e59b4aae19f0c434f71b65f25d9cdae1fc53c12bdf3a5f68ece94df4fae87261acbdc2351fc3ca52
SSDEEP

3072:jwNHM4OmdbaMrACfglpGQ8qxjij0d5MuUbR:jt4D/A2glpGqxM08LF

Score

N/A

Malware Config

Signatures

Files

0c74b7e8e930829410e6d50c3cab922522b9fe39bdc9c612cfadb1f2fc5c86cf
.exe windows x86

a221da73bdb3ecbbd80500970f815b41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
ExpandEnvironmentStringsA
lstrcatA
lstrcpyA
GetModuleHandleA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
SetEvent
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetTickCount
Sleep
lstrcmpiA
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
GetFileTime
CreateFileA
GetTempPathA
GetLastError
CreateMutexA
MoveFileA
DeleteFileA
GetCommandLineA
LoadLibraryA
CreateThread
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
WaitForSingleObject
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetConsoleMode
GetConsoleCP
SetFilePointer
GetFileType
SetHandleCount
ReadFile
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
HeapCreate
GetStartupInfoA
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
HeapReAlloc
HeapAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
VirtualProtect

user32

SendMessageTimeoutA
RegisterWindowMessageA
UpdateWindow
FindWindowA
PostThreadMessageA
GetSystemMetrics
GetClassNameA
EnumChildWindows
SetForegroundWindow
BringWindowToTop
MoveWindow
IsWindow
CreateWindowExA
GetMessageA
wsprintfA
MessageBoxA
EnumWindows
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
SetTimer
ShowWindow

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear
SysStringLen
DispCallFunc
LoadRegTypeLi
LoadTypeLi

shlwapi

PathGetArgsA
PathFindFileNameA
PathFileExistsA
PathRemoveBlanksA

ws2_32

socket
htons
ioctlsocket
connect
select
__WSAFDIsSet
closesocket
send
WSAStartup
gethostbyname
recv

netapi32

Netbios

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a221da73bdb3ecbbd80500970f815b41

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

netapi32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 8KB - Virtual size: 7KB