dbb00af2440f8eda55745d424b0307c73d5e991b88b2015477972dc204acfcde

Sharing

Copy URL Twitter E-mail

General

Target

dbb00af2440f8eda55745d424b0307c73d5e991b88b2015477972dc204acfcde
Size

132KB
MD5

66e826f3cea71b08ae409650bfb5b52f
SHA1

aa3ef5eaeb615632c939cf98cec95c39ba56798d
SHA256

dbb00af2440f8eda55745d424b0307c73d5e991b88b2015477972dc204acfcde
SHA512

edf51691bea11b2ea1e29d49524136276eb4a00929bf1fe65bd40cb1df322d953571baee1dac9dfe230623e9e82da0cf445a91d7369f786930a942709dbe3a3b
SSDEEP

1536:G4Bft+B3Wt6nQC3oa6upBa6nOwnpSpkLWbcttRzfRhcdiQSQjOHJ1p5qP/5ho0GW:G4BfbYu9uaaWIttRzfAuqPwffiAFQ0e

Score

N/A

Malware Config

Signatures

Files

dbb00af2440f8eda55745d424b0307c73d5e991b88b2015477972dc204acfcde
.exe windows x86

25cae8b3ac658bffc7626ad9429c8ac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
WSACleanup

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
RegCloseKey
RegSetValueExA

kernel32

GetProcessHeap
CloseHandle
GetModuleFileNameA
SetEvent
Sleep
OpenEventA
GetVersionExA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSection
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree

winhttp

WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25cae8b3ac658bffc7626ad9429c8ac4

Headers

File Characteristics

Imports

ws2_32

advapi32

kernel32

winhttp

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 52KB - Virtual size: 52KB