a48a63a10bc8ee15ac158f16d883496c72be075a23a4945375caf5dab368e6e3

Sharing

Copy URL Twitter E-mail

General

Target

a48a63a10bc8ee15ac158f16d883496c72be075a23a4945375caf5dab368e6e3
Size

63KB
MD5

afd408a055de4367de2598a49258120d
SHA1

23858f48d8dad0ddc1eff51e4e355b95771f98c3
SHA256

a48a63a10bc8ee15ac158f16d883496c72be075a23a4945375caf5dab368e6e3
SHA512

ee9ec99b97f02269bdb9c8b87f27ef9a1e2d7521a27a3ce7b26434eb1e80e098af776c71ffdf3ccd1ffa8804b079cabbaabdd3cc7d65a16f029e12454c05494b
SSDEEP

384:kV8zgbJxIx6Qo4iG/r6Zz+Sg5bFBbkKYBSpRZDXZ2Lv7m617tlMd:KrbJxIZiG/r6ZruXXZOv7m8/Md

Score

N/A

Malware Config

Signatures

Files

a48a63a10bc8ee15ac158f16d883496c72be075a23a4945375caf5dab368e6e3
.exe windows x86

8a091e7b492456e633a72146aafab34e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord825
ord6877
ord537
ord3619
ord3626
ord3663
ord2414
ord2243
ord6663
ord6648
ord823
ord800

msvcrt

strncpy
tolower
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strstr
_stricmp
wcslen
_exit
_XcptFilter
exit
__setusermatherr
_acmdln
strncmp
??1type_info@@UAE@XZ
wcstombs
_except_handler3
_mbsstr
_CxxThrowException
__dllonexit
_onexit
isspace
_initterm
__getmainargs
malloc
isprint
free
sprintf
__CxxFrameHandler
isalnum
_controlfp

kernel32

LocalFree
GetStartupInfoA
GetModuleHandleA
GetCurrentThreadId
GetComputerNameA
CreateThread
GetLocalTime
lstrlenW
Sleep
CreateMutexA
ReleaseMutex
ExitProcess
GetCurrentProcess
SetPriorityClass
GetLastError
CreateFileA
DeviceIoControl
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetVersionExA

user32

PostThreadMessageA
MoveWindow
SetForegroundWindow
BringWindowToTop
SetActiveWindow
FindWindowExA
wsprintfA
MessageBoxA
SendMessageTimeoutA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
GetWindowRect
GetClientRect
GetInputState
LoadCursorA
SetCursor
SetFocus
PostQuitMessage
FindWindowA
CreateWindowExA
ShowWindow
SendMessageA
GetWindowTextA
GetClassNameA
WindowFromPoint
GetCursorPos
GetForegroundWindow
EnumChildWindows
RegisterClassExA
UpdateWindow
DefWindowProcA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString

msvcp60

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

iphlpapi

GetAdaptersInfo

ws2_32

WSAStartup
socket
htons
inet_addr
connect
closesocket
send
recv
WSACleanup

shlwapi

StrStrIA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8a091e7b492456e633a72146aafab34e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

ole32

oleaut32

msvcp60

iphlpapi

ws2_32

shlwapi

Sections

.text Size: 62KB - Virtual size: 61KB

.text
Size: 62KB - Virtual size: 61KB