aa970f97979270892e6ac8841ebe19d1d9279fabfc9d10970f2a18e6748175a4

Sharing

Copy URL Twitter E-mail

General

Target

aa970f97979270892e6ac8841ebe19d1d9279fabfc9d10970f2a18e6748175a4
Size

58KB
MD5

da4b6eac6408c5f0172f84c4a78e83ad
SHA1

3940a6e18ba8ec7db97a0b0d01ae1519d9703af9
SHA256

aa970f97979270892e6ac8841ebe19d1d9279fabfc9d10970f2a18e6748175a4
SHA512

54bc7914cc78984fd84a2ed7b1e92acafae625d31effa2486b9eb7bc5e404fc4c50f8e1374022f7f6bf12107e42a16f1e63c731498cacd248f750fe4c6cfbcb0
SSDEEP

1536:fiBwslu0MtGQutJeS4AUk2tRQHlfteQo8jHu+/pCA/:qBwmurAtES4AJ2tSHlf4wru+

Score

N/A

Malware Config

Signatures

Files

aa970f97979270892e6ac8841ebe19d1d9279fabfc9d10970f2a18e6748175a4
.exe windows x86

85a7e7bdb1b2f3aad3b7f861b4813a6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetTimeFormatA
GetLocalTime
CreateThread
ExpandEnvironmentStringsA
CloseHandle
WriteFile
CreateFileA
DeleteFileA
GetTempPathA
GetVersionExA
GlobalMemoryStatus
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
CreateMutexA
GetLastError
Sleep
GetSystemDirectoryA
CopyFileA
TerminateThread
CreateProcessA
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetEndOfFile
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
GetCurrentProcess
TerminateProcess
ExitProcess

user32

FindWindowA
SendMessageA

mpr

WNetAddConnection2A
WNetCancelConnection2A

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA

ws2_32

gethostbyaddr
bind
listen
accept
recv
socket
inet_ntoa
send
setsockopt
htons
htonl
sendto
WSAGetLastError
inet_addr
gethostbyname
WSAStartup
WSACleanup
closesocket
getsockname
select
ioctlsocket
ntohl
WSAAsyncSelect
__WSAFDIsSet
connect
WSASocketA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 33KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WWP32
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85a7e7bdb1b2f3aad3b7f861b4813a6e

Headers

File Characteristics

Imports

kernel32

user32

mpr

advapi32

shell32

ws2_32

wininet

Sections

.text Size: 33KB - Virtual size: 55KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 17KB - Virtual size: 157KB

.WWP32 Size: 1024B - Virtual size: 712B

.text
Size: 33KB - Virtual size: 55KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 17KB - Virtual size: 157KB

.WWP32
Size: 1024B - Virtual size: 712B