a79e1c2c03ba9c40750ee645bc602c5e27f68f64667c80f1866d91fc53d1849f

General

Target

a79e1c2c03ba9c40750ee645bc602c5e27f68f64667c80f1866d91fc53d1849f
Size

160KB
MD5

260ca9c93f63b1b86ed26a25039615e7
SHA1

1e161824aac8991697f25654fe131dc742eef421
SHA256

a79e1c2c03ba9c40750ee645bc602c5e27f68f64667c80f1866d91fc53d1849f
SHA512

f5e89e5ca1fbcfcb33aba36d938a316e1e62bd347fddddf7addbb74bf1feaec3ff9c25ab2f51d8215c0c0b3ceacfd35bbcaa30951fd3ea07a72d5b0674c89bea
SSDEEP

3072:Pnhm3DLVUo8nK6MkPkn1DCoeX3p8zZTTDAS/BN8SFIM1RNGAcy:/hwXV8nVM6kn0osoMsBqSxRNG4

Score

N/A

Malware Config

Signatures

Files

a79e1c2c03ba9c40750ee645bc602c5e27f68f64667c80f1866d91fc53d1849f
.exe windows x86

caf3d61b5f98e4a0a3266157a5413708

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
ReadFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
MultiByteToWideChar
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetLastError
FlushFileBuffers
GetStringTypeW

user32

FindWindowA

shell32

ShellExecuteA

ws2_32

inet_addr
htons
connect
inet_ntoa
recv
closesocket
WSACleanup
gethostbyname
socket
WSAStartup
send

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

caf3d61b5f98e4a0a3266157a5413708

Headers

File Characteristics

Imports

kernel32

user32

shell32

ws2_32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 100KB - Virtual size: 97KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 100KB - Virtual size: 97KB