ad13881fce1c0418bce50c5888383a930ea7d979077794b54e0b2592c008254c

Sharing

Copy URL Twitter E-mail

General

Target

ad13881fce1c0418bce50c5888383a930ea7d979077794b54e0b2592c008254c
Size

124KB
MD5

1b43b97ef01a963cd03514448072a651
SHA1

8f931fbbdc300fe97f87f39b123de83c9b965412
SHA256

ad13881fce1c0418bce50c5888383a930ea7d979077794b54e0b2592c008254c
SHA512

8efb92aa734ecc5f229ab7c2c6622683edb3526a65f7e0fa528023dccbb8df9b37e1332d34e7a65dd134d666d6b188980ce9073297dbad19b1381724e6ab5641
SSDEEP

3072:NTjz7E6wrDxa1bbUlYcxG3bMDNzNh+SdrFO9:NTjzY72bbUCCAwtNh+Ara

Score

N/A

Malware Config

Signatures

Files

ad13881fce1c0418bce50c5888383a930ea7d979077794b54e0b2592c008254c
.exe windows x86

c8ccc34ab362c4f6a7d387b496813e12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
FreeResource
MoveFileExA
LoadResource
Process32First
WaitForSingleObject
GetTickCount
OpenProcess
Thread32First
TerminateThread
Sleep
SizeofResource
CreateProcessA
TerminateProcess
Thread32Next
ReadFile
lstrcatA
MultiByteToWideChar
GetStartupInfoA
GetLastError
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
GetTempFileNameA
OpenThread
LocalAlloc
GetModuleFileNameA
CreateToolhelp32Snapshot
WinExec
GetCurrentProcessId
LocalFree
DeleteFileA
lstrcpyA
GlobalAlloc
GlobalFree
lstrcmpiW
lstrcpyW
ExpandEnvironmentStringsW
ExitProcess
GetFileSize
GetCurrentProcess
GetCommandLineA
CreateEventA
GetSystemDirectoryA
Module32First
VirtualAlloc
CreateMutexA
Module32Next
ReleaseMutex
GetTempPathA
CreateThread
lstrlenA
WriteFile
SetFilePointer
RtlMoveMemory
RtlFillMemory
CreateFileA
Process32Next
CloseHandle

user32

wsprintfA
CharLowerA
wsprintfW

ws2_32

connect
inet_ntoa
WSCGetProviderPath
recvfrom
select
WSAGetLastError
htons
setsockopt
sendto
recv
closesocket
send
socket
gethostbyname
WSAStartup
WSCInstallProvider
WSCWriteProviderOrder
WSCEnumProtocols
WSACleanup
WSCDeinstallProvider

advapi32

RegQueryValueExA
OpenProcessToken
RegSetValueExA
RegCreateKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA

shlwapi

PathFileExistsA

rpcrt4

UuidCreate

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8ccc34ab362c4f6a7d387b496813e12

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

advapi32

shlwapi

rpcrt4

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 104KB - Virtual size: 100KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 104KB - Virtual size: 100KB