af9a268cb590e2e92889debbeee4f2504a67025019b989ca4d7878c98182610a

General

Target

af9a268cb590e2e92889debbeee4f2504a67025019b989ca4d7878c98182610a
Size

12KB
MD5

7bc53989528c3a64631cd438b3212e77
SHA1

83e718396fe1b607d1299a20839f13734c437148
SHA256

af9a268cb590e2e92889debbeee4f2504a67025019b989ca4d7878c98182610a
SHA512

ef70cdc4c7d8835b810b9bc7a8d3c658824cdec644e211ad190a504a5e37e6348053a872d7545cddec23de4c29bff7e9ff3a9232b41804215aa8d1432cdd6959
SSDEEP

192:zXLthdkhmk33/TFs/3y6Z9raINIPrylrviWTBk+XfEGkvlNbn0d/05Wtti80a5:7ZTh43/TW/3RH2+lrvfHfkv3nEc5WtPN

Score

N/A

Malware Config

Signatures

Files

af9a268cb590e2e92889debbeee4f2504a67025019b989ca4d7878c98182610a
.exe windows x86

e7a8b7f32b94428c9b3c76d3959f1fb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
WriteFile
SetFilePointer
CreateFileA
ExitProcess
lstrcmpiA
Sleep
lstrlenA
GetModuleFileNameA
CreateEventA
DeleteFileA
GetTempPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
lstrcpyA
WinExec
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

user32

wsprintfA

advapi32

OpenProcessToken
DuplicateTokenEx
CreateProcessAsUserA

msvcr80

rand
atoi
memcpy
memset
strncpy_s
_crt_debugger_hook
strchr
strstr
srand

ws2_32

gethostbyname
setsockopt
WSAEventSelect
recv
WSAStartup
inet_addr
htons
shutdown
connect
closesocket
inet_ntoa
WSACleanup
socket
gethostname
send

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7a8b7f32b94428c9b3c76d3959f1fb5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcr80

ws2_32

userenv

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 428B

.vmp0 Size: 4KB - Virtual size: 3KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 428B

.vmp0
Size: 4KB - Virtual size: 3KB