a52a78cfd82b827954ce7c37ee1286c43e480341785ef8dcff1a42e641a1edb7

Sharing

Copy URL

Twitter E-mail

General

Target

a52a78cfd82b827954ce7c37ee1286c43e480341785ef8dcff1a42e641a1edb7
Size

610KB
MD5

d81068c900356520677cf7f0d3d6b9b8
SHA1

4f617c7a040e3778988830061ca7db91753a82ec
SHA256

a52a78cfd82b827954ce7c37ee1286c43e480341785ef8dcff1a42e641a1edb7
SHA512

5b307c47ea1c7c41712c1aec169aa75ec89dfdd931ec776a5206a57906937026e432585a05ce17cb18ad617e1e289bb6cba83ef4e4c8215e6911183fbcbf675c
SSDEEP

12288:kRN8C4WIHtZ5OERk45+gx8/XGhx7pfl0HwVx4rqE1LTkE1n6t3Yt0:kRN81z5OERP5N8/XGhx7MQVxatLTko0U

Score

N/A

Malware Config

Signatures

Files

a52a78cfd82b827954ce7c37ee1286c43e480341785ef8dcff1a42e641a1edb7
.exe windows x86

0081aa3d4980ceef573ea3c5a8d39bdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
GetTempPathA
GetFullPathNameA
FindNextFileA
lstrlenA
FormatMessageA
DeviceIoControl
DefineDosDeviceA
QueryDosDeviceA
GetCurrentThread
SetThreadAffinityMask
GetProcessAffinityMask
GetCurrentProcess
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
GetCommandLineA
ExitProcess
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
Sleep
GetCurrentDirectoryA
TerminateProcess
GetEnvironmentVariableA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
ReadFile
SetFilePointer
SetEndOfFile
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
FindFirstFileA
CreateDirectoryA
FindClose
GetVersionExA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
DeleteFileA
LocalAlloc
CreateFileA
LocalFree
ReleaseMutex
CreateMutexA
WaitForSingleObject
CloseHandle
GetVersion
GetTickCount
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThreadId
AllocConsole
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetPrivateProfileStringA
GetPrivateProfileIntA
SetFileAttributesA
SetFileTime
GetFileTime
MoveFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileAttributesA
GetModuleHandleA
SetCurrentDirectoryA
GetStdHandle

ws2_32

socket
bind
getsockname
WSAStartup
closesocket
inet_addr

advapi32

AllocateAndInitializeSid
RegSetValueExA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumValueA
GetUserNameA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetKeySecurity
RegCloseKey
RegQueryValueA
RegCreateKeyExA
RegSetValueA
SetFileSecurityA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
OpenProcessToken
SetNamedSecurityInfoA
SetEntriesInAclA
RegOpenKeyA

user32

MessageBoxA

rpcrt4

UuidCreate

netapi32

Netbios

Sections

.text
Size: 344KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 160KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0081aa3d4980ceef573ea3c5a8d39bdb

Headers

File Characteristics

Imports

kernel32

ws2_32

advapi32

user32

rpcrt4

netapi32

Sections

.text Size: 344KB - Virtual size: 340KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 160KB - Virtual size: 211KB

.rsrc Size: 90KB - Virtual size: 90KB

.text
Size: 344KB - Virtual size: 340KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 160KB - Virtual size: 211KB

.rsrc
Size: 90KB - Virtual size: 90KB