b22028967ee1e056aa3666049131c3e751d0ef999eaf4f1ab49cee40f4a2b3df

General

Target

b22028967ee1e056aa3666049131c3e751d0ef999eaf4f1ab49cee40f4a2b3df
Size

83KB
MD5

a12a5ca0d4e68b7490a6c89f13766595
SHA1

45909a3cff2f07141d6d3f96971de6b321936105
SHA256

b22028967ee1e056aa3666049131c3e751d0ef999eaf4f1ab49cee40f4a2b3df
SHA512

9e3a1a7f8607c123f2d3127d456104a1520dcd60717b774e962d6c62882faf42b9aa356edef8dd808a62f90031172c11d4ad4422df547b2fd8523bd7c4c9a823
SSDEEP

1536:N0bwv6y5jgP9syk2GD9aPrafE8pDuhlZYuQ+82jaW+RTnqp5fmUlWEzjnY/PYCq:ewv6yl2sHDYPWNuRg+82jaZ+mszjCW

Score

N/A

Malware Config

Signatures

Files

b22028967ee1e056aa3666049131c3e751d0ef999eaf4f1ab49cee40f4a2b3df
.exe windows x86

e9f50fb0ef76f6e87065ee6d7886cd7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitNamedPipeA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
DeleteFileA
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
Sleep
GetTempFileNameA
GetTempPathA
SetFilePointer
CreateProcessA
WinExec
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleHandleA
VirtualFreeEx
GetProcAddress
WriteProcessMemory
VirtualAllocEx
CreateMutexA
DisconnectNamedPipe
PeekNamedPipe
ConnectNamedPipe
CreateNamedPipeA
TerminateThread
OpenMutexA
GetShortPathNameA
CopyFileA
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitProcess
WaitForSingleObject
CreateEventA
SetEvent
OpenEventA
GetLastError
CreateFileA
WriteFile
OpenProcess
CloseHandle

user32

GetWindowThreadProcessId
PostMessageA
EnumWindows
wsprintfA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

msvcrt

_stricmp

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e9f50fb0ef76f6e87065ee6d7886cd7f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcrt

Sections

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 69KB - Virtual size: 72KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 69KB - Virtual size: 72KB