5692e06f9585e4f5f92b4b0314302795c3d5d5d43622edeb436847ec47de1597[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5692e06f9585e4f5f92b4b0314302795c3d5d5d43622edeb436847ec47de1597.exe
Size

16KB
MD5

dd2357189d93b4513a44633afa0d684a
SHA1

0d8fec7e5a523d4515a4f9086f85e9f7afa10313
SHA256

5692e06f9585e4f5f92b4b0314302795c3d5d5d43622edeb436847ec47de1597
SHA512

c6897fb209fcf5f87c5dc814abb63dfd86cfc7b1d077f3463b5467082a4a8c369485f4e1950087d36c46933d99ca72d778acc303f3aedd59d25af8235b50723c
SSDEEP

384:ILSMh0rU5KJg6i27zc/br09pVjjyLVnHfW4bt0+m+gv:oS1w5j6p7zEbr09v6xH1bt0+O

Score

N/A

Malware Config

Signatures

Files

5692e06f9585e4f5f92b4b0314302795c3d5d5d43622edeb436847ec47de1597.exe
.exe windows x86

c0b03518594e3a3efeab176af95ce980

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
VirtualAlloc
WaitForSingleObject
GetLastError
CloseHandle
CreateThread
ResetEvent
CreateEventA
CreateDirectoryW
lstrlenW
WriteFile
ExpandEnvironmentStringsW
OutputDebugStringA
SetFilePointer
lstrlenA
CreateFileW
SetFileAttributesW
MultiByteToWideChar
lstrcatW
lstrcpyA
GetLocalTime
FormatMessageA
GetCurrentProcess
GetModuleHandleA
Sleep
LoadLibraryA
GetProcAddress
GetTickCount
IsDebuggerPresent
CheckRemoteDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
IsProcessorFeaturePresent
QueryPerformanceCounter

user32

wsprintfA
wsprintfW
MessageBoxA
GetAsyncKeyState

ws2_32

closesocket
WSACleanup
gethostbyname
htons
send
socket
connect
WSAStartup
recv

vcruntime140

__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
memset
_except_handler4_common
__std_exception_copy
memcpy

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
__p___argc
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_crt_atexit
_controlfp_s
terminate
_c_exit
_set_app_type
_cexit
_get_initial_narrow_environment
__p___argv
_seh_filter_exe
_exit
_initterm_e
_register_onexit_function
exit
_initterm

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0b03518594e3a3efeab176af95ce980

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 824B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 824B