4cb8f76397aa92d367fbfc72426722f1d3525d563db8211dcf25530218350314

Sharing

Copy URL Twitter E-mail

General

Target

4cb8f76397aa92d367fbfc72426722f1d3525d563db8211dcf25530218350314
Size

64KB
MD5

8165bb31218a0a51091de29cc11ec0f7
SHA1

6158dc30f982d3abd6d941f15379d3eb66a2f184
SHA256

4cb8f76397aa92d367fbfc72426722f1d3525d563db8211dcf25530218350314
SHA512

4c57397e94d2b3fd07e8a7802b9f478524157ea628f0455568a0d958dfbb34ba78e511a5f2f79ab4cd191a9731f15ab2eba382bdd2fff44abb3e32670c3ce6dc
SSDEEP

1536:W5RN19H86jToISl2UtJaiejP1T8LpBeL50yX5LugLNd:yi/QQneL50yX5Lu4Nd

Score

N/A

Malware Config

Signatures

Files

4cb8f76397aa92d367fbfc72426722f1d3525d563db8211dcf25530218350314
.exe windows x86

aaabdb0b1d057b2e282f353b3720fdf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
ExitProcess
CloseHandle
ReleaseMutex
OpenMutexA
lstrlenA
lstrcpynA
OutputDebugStringA
WaitForSingleObject
SetFilePointer
WriteFile
CreateFileA
LockResource
FindResourceA
CreateThread
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
GetModuleHandleA
GetLastError
GlobalMemoryStatusEx
GetSystemInfo
lstrcpyA
GetSystemDefaultUILanguage
CreateProcessA
TerminateProcess
ExitThread
lstrcmpA
Sleep
GetLocalTime
WinExec
LoadLibraryA
EnumResourceNamesA
GetProcAddress
GetStartupInfoA

user32

GetDesktopWindow
wsprintfA

advapi32

RegOpenKeyExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
StartServiceCtrlDispatcherA

shell32

ShellExecuteA
SHChangeNotify
ShellExecuteExA

ws2_32

send
select
__WSAFDIsSet
closesocket
setsockopt
WSAIoctl
socket
gethostname
gethostbyname
WSACleanup
WSAStartup
inet_ntoa
recv
htonl
connect
inet_addr
sendto
htons

shlwapi

SHDeleteKeyA

iphlpapi

GetIfTable
GetAdaptersInfo

msvcrt

__CxxFrameHandler
strcmp
??2@YAPAXI@Z
_onexit
__dllonexit
_controlfp
??3@YAXPAX@Z
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
strchr
rand
realloc
malloc
strlen
sprintf
memset
memcpy
atoi
strncpy
strcspn
strstr
strcpy
_except_handler3
_CxxThrowException
localtime
time
exit
strcat
strncmp
free

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aaabdb0b1d057b2e282f353b3720fdf4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

shlwapi

iphlpapi

msvcrt

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 16KB - Virtual size: 16KB