214fb3cf4ec7571b79b5d2159673ba2c2ae6a15e3fcce4d25e7860ca3ae33fa7

General

Target

214fb3cf4ec7571b79b5d2159673ba2c2ae6a15e3fcce4d25e7860ca3ae33fa7
Size

56KB
MD5

a8074898909a56f6e3cd14a0c7cbc20a
SHA1

496bd820e517f94d1fdb14cd5e805bfa403c62ec
SHA256

214fb3cf4ec7571b79b5d2159673ba2c2ae6a15e3fcce4d25e7860ca3ae33fa7
SHA512

78a367d5ade5e39327fb51cb09c1525d07208f392a60f357a914abece7db002607123f5a2a91a40e4f6c2f458c192a4124afddb18e79326068b4c77034b94945
SSDEEP

768:UyMG9AOO/eip9H1WkkIOcSz6jomQNPqxnKoLC9vSZYt:hAlWkdfS+j0Scs6t

Score

N/A

Malware Config

Signatures

Files

214fb3cf4ec7571b79b5d2159673ba2c2ae6a15e3fcce4d25e7860ca3ae33fa7
.exe windows x86

c475d14296b70c3035e02ee78e7bf1f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CompareStringA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
CreateMutexA
GetLastError
ExitProcess
WaitForSingleObject
CloseHandle
OutputDebugStringA
CreateThread
Sleep
GetCurrentProcessId
CompareStringW
GetTickCount
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
HeapReAlloc
VirtualAlloc
SetFilePointer
WriteFile
HeapFree
VirtualFree
SetEnvironmentVariableA
HeapCreate
HeapDestroy
GetVersionExA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA

user32

wsprintfA

advapi32

CreateServiceA
OpenServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

__WSAFDIsSet
recv
WSAIoctl
socket
connect
send
gethostname
inet_ntoa
WSAStartup
select
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
WSASocketA

iphlpapi

GetIfTable

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c475d14296b70c3035e02ee78e7bf1f9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

iphlpapi

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB