0e9f8479a4b8aaa29af3aa5a8c620d64683045a0352c17bb871c52d6adf74d08

Sharing

Copy URL Twitter E-mail

General

Target

0e9f8479a4b8aaa29af3aa5a8c620d64683045a0352c17bb871c52d6adf74d08
Size

87KB
MD5

82fbed2831f35033d2d4f89710b74166
SHA1

3d9e2947287e11e729571199e9964e567b566638
SHA256

0e9f8479a4b8aaa29af3aa5a8c620d64683045a0352c17bb871c52d6adf74d08
SHA512

074edf8418df65c14c166b6869a9fe7dbfb175fc00678f721d839f21413b0391ed4089b0972756bc46741a37b6988552a7ea4028a4ea45ec0fdd225a47623c06
SSDEEP

1536:fhIrekemguRf4KUQGkCQvXev1E1jewbtEMAvqSPj73+:fhISuOKp0QvXe9qj/tEMAiSG

Score

N/A

Malware Config

Signatures

Files

0e9f8479a4b8aaa29af3aa5a8c620d64683045a0352c17bb871c52d6adf74d08
.exe windows x86

326ddec9944367d9a7a7ea135e7111db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ExitThread
Sleep
CreateThread
WinExec
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
ExitProcess
GetLastError
CreateMutexA
CopyFileA
CreateDirectoryA
GetModuleFileNameA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
InterlockedExchange
LocalAlloc
FreeLibrary
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
IsBadCodePtr
IsBadReadPtr
RtlUnwind
RaiseException
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile

shell32

SHGetSpecialFolderPathA

ws2_32

select
__WSAFDIsSet
WSAIoctl
recv
WSASocketA
WSAStartup
setsockopt
sendto
inet_addr
gethostbyname
socket
htons
connect
closesocket
send

iphlpapi

GetIfTable

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

326ddec9944367d9a7a7ea135e7111db

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

iphlpapi

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 19KB

.sxdata Size: 512B - Virtual size: 124B

.rsrc Size: 11KB - Virtual size: 12KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 19KB

.sxdata
Size: 512B - Virtual size: 124B

.rsrc
Size: 11KB - Virtual size: 12KB