861599783c722b3e6514157da0388c41951d59a09be6f404bc27e613bb0c59fd

General

Target

861599783c722b3e6514157da0388c41951d59a09be6f404bc27e613bb0c59fd
Size

24KB
MD5

e04cd89f27d1bf133eb53777cb5f5eb5
SHA1

8ccb68a2c21591de8aebc67a5fd4082188c1cf7d
SHA256

861599783c722b3e6514157da0388c41951d59a09be6f404bc27e613bb0c59fd
SHA512

a077c07cb65abeb6a9ed5c1d8361917a24675ff7c79594ba78464a2506db605cf6232a1762a8e65deb5450f4e6944bd286ff56a37cd0dbdc2f3aeb7d3f85dbac
SSDEEP

384:yfjt5XUAgP/m6B0ZZQ92fhe6nRMX9s6XiQLaiwdjaLacmkC0GJsJxXSdqWoZDEWA:otVbe2ZHRM66yQKjaLacmkLGKddm

Score

N/A

Malware Config

Signatures

Files

861599783c722b3e6514157da0388c41951d59a09be6f404bc27e613bb0c59fd
.exe windows x86

ca38d8c8afcb15a93fd70f44e22d38e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
FindNextFileA
DeleteFileA
FindFirstFileA
lstrlenA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
GetExitCodeThread
TerminateThread
VirtualProtect
CreateMutexA
CreateThread
CreateEventW
LocalAlloc
GetLastError
ReadFile
SetFilePointer
lstrcmpA
GetSystemDirectoryA
LocalFree
MultiByteToWideChar
GetVersionExA
LoadLibraryA
GetModuleHandleW
lstrcpyA
Sleep
FreeLibrary
SetThreadPriority
WaitForSingleObject
SetEvent
ResetEvent
GetProcAddress
GetModuleFileNameA
GetTempPathA
CreateFileA
WriteFile
CloseHandle
WinExec

user32

CharLowerA
wsprintfA
CharUpperA

advapi32

RegOpenKeyA
RegQueryValueExA
DeleteService
OpenServiceA
ControlService
OpenSCManagerA
CreateServiceA
StartServiceA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA

ws2_32

closesocket
WSACleanup
socket
WSAStartup
connect
recv
send

urlmon

URLDownloadToFileA

dnsapi

DnsRecordListFree
DnsQuery_W

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca38d8c8afcb15a93fd70f44e22d38e8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

urlmon

dnsapi

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 1016B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 1016B