65a19bf0081e746da7b22611213fbb01b092ed8a291f8d2ea0b96a6fa3fcd174

General

Target

65a19bf0081e746da7b22611213fbb01b092ed8a291f8d2ea0b96a6fa3fcd174
Size

108KB
MD5

abad0a146c7dfb932f651aec9eace395
SHA1

a76c758ab0ece30ea757135c5d8e7078a36c278b
SHA256

65a19bf0081e746da7b22611213fbb01b092ed8a291f8d2ea0b96a6fa3fcd174
SHA512

ca6420b9cc194b33416bce061d673e4b5c5910f67dc952528110e437f056b563ba5911724ab550a70f714d274e62e8e6c7a97c89443a0fd2f3be4b925f5e44c9
SSDEEP

3072:jPfSAG58eGXXLSXXXXXXXXXXXXXXXXXXXX4XXXXXXXXXXXXeGBwnPmXXXXXXXXXu:TE8eGXXLSXXXXXXXXXXXXXXXXXXXX4X5

Score

N/A

Malware Config

Signatures

Files

65a19bf0081e746da7b22611213fbb01b092ed8a291f8d2ea0b96a6fa3fcd174
.exe windows x86

05f007793c268f74faa360243010a63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
SetFirmwareEnvironmentVariableA
InterlockedExchange
CreateEventA
Sleep
ExitProcess
CloseHandle
VirtualFree
LoadLibraryA
CreateFileA
lstrlenA
GetTickCount
GetModuleHandleA
GetProcAddress
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemDirectoryA
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualQuery

user32

FindWindowA
SetActiveWindow
wsprintfA
LoadIconA
EnableWindow

ws2_32

shutdown
WSAGetLastError

dnsapi

DnsModifyRecordsInSet_A

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05f007793c268f74faa360243010a63a

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

dnsapi

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 23KB