85469dce288b15de4864507039baf7bfa052a2e12b60f1b9a5604a94f65cceb8

Sharing

Copy URL

Twitter E-mail

General

Target

85469dce288b15de4864507039baf7bfa052a2e12b60f1b9a5604a94f65cceb8
Size

126KB
MD5

4044fe8d00eb8cf476701f5e6546c5ce
SHA1

18c9ad74a6f145cc494949b4337f9e20859c855b
SHA256

85469dce288b15de4864507039baf7bfa052a2e12b60f1b9a5604a94f65cceb8
SHA512

23089b1fdb701c8c9fcd8a228e6fc930e459ad98b4c00e28bc5f2f3c45cea08daec0f3978fec2fb5f3f054affecd7c477bdad22ba464e67fd989ceae6fa98d07
SSDEEP

1536:fBdoBRuyC/+E0+yupH78NJoG84ZK8uTPp07+aZ5OtYcHE1cZl5SrKH9ushP55X50:Do/wFpHeJJiby9YtYcHEKZl5S+d7b4

Score

N/A

Malware Config

Signatures

Files

85469dce288b15de4864507039baf7bfa052a2e12b60f1b9a5604a94f65cceb8
.exe windows x86

6a2730c33063cbe662b81a35a54b0cb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
GlobalFree
GlobalAlloc
MulDiv
GlobalUnlock
SetSystemPowerState
GetLocalTime
CreateFileA
SetTapePosition
LoadResource
FindResourceA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetFilePointer
ReadFile
CloseHandle
GetTimeZoneInformation
GetSystemTime
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
SetEnvironmentVariableA

user32

SystemParametersInfoA
FrameRect
ClientToScreen
RegisterClassExA
GetWindowTextLengthA
ValidateRect
PostMessageA
InvalidateRect
EmptyClipboard
BeginPaint
DestroyMenu
GetSystemMetrics
MapWindowPoints
GetIconInfo
SetWindowTextA
CheckDlgButton
IsDialogMessageA
LoadBitmapA

ole32

CoInitialize
CoRevokeClassObject
OleInitialize
OleSetContainedObject

ws2_32

WSACloseEvent
getservbyname
htons
recv
ntohs
WSACreateEvent
WSAAddressToStringA
WSAConnect
getsockopt
recvfrom
send

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 1017KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a2730c33063cbe662b81a35a54b0cb5

Headers

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 52KB - Virtual size: 1017KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 52KB - Virtual size: 1017KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 1KB