b8fc8b742ab377e94a5f276eb7715d2afc8b4c5dbe1606a34b57a88e4739df3d

Sharing

Copy URL Twitter E-mail

General

Target

b8fc8b742ab377e94a5f276eb7715d2afc8b4c5dbe1606a34b57a88e4739df3d
Size

84KB
MD5

fb13f48882b4d8b66001b847ab8d099b
SHA1

27322f34b185b33e1f76a7b6c6aa69fe3e1f08fd
SHA256

b8fc8b742ab377e94a5f276eb7715d2afc8b4c5dbe1606a34b57a88e4739df3d
SHA512

91d4ae83cf218673d24c9332ba9c06ca245f31cb80c4849760eb408fd89309e92661219e07551335cebd3ca0b859ca5043e922f2476c58666c48855113cd6a13
SSDEEP

1536:D0ISQx7g8N4TLdjbwQ84tIARWL1i+9CyO82tKcOtIum/:QI/xoR7jQ1lOptvOt9m/

Score

N/A

Malware Config

Signatures

Files

b8fc8b742ab377e94a5f276eb7715d2afc8b4c5dbe1606a34b57a88e4739df3d
.exe windows x86

a7b33b9053cbc5e1bb6d7f46e99f7e97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
ExitThread
TerminateProcess
CreateThread
GetLastError
CloseHandle
WaitForSingleObject
ExitProcess
CreateMutexA
GetCurrentProcess
GetTickCount
OpenProcess
DeleteFileA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
MoveFileA
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
GetModuleFileNameA
lstrcmpA
CopyFileA
GetLocalTime
Sleep
GetVersionExA
GlobalMemoryStatusEx
GetSystemInfo
LoadLibraryA
GetProcAddress
WinExec
FreeLibrary
lstrlenA
CreateProcessA
GetSystemDirectoryA
lstrcatA
CreateFileA
lstrcpyA
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
SetStdHandle
WriteFile
GetEnvironmentStringsW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

wsprintfA

advapi32

CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA

ws2_32

select
__WSAFDIsSet
recv
send
WSASocketA
htonl
sendto
shutdown
WSAGetLastError
WSACleanup
WSAStartup
setsockopt
WSAIoctl
htons
socket
connect
closesocket
inet_addr
gethostbyname
gethostname

psapi

GetModuleFileNameExA

iphlpapi

GetIfTable

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a7b33b9053cbc5e1bb6d7f46e99f7e97

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

psapi

iphlpapi

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 21KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 21KB