e207a333905b006bb623cc5cf88837a6f9534bb2d48169044b2b2026de42139c

General

Target

e207a333905b006bb623cc5cf88837a6f9534bb2d48169044b2b2026de42139c
Size

412KB
MD5

2a113aeac3eb7001658ca1739c268c10
SHA1

ad76db46b7ea0e945d25ae3691635e11ff1dd7f3
SHA256

e207a333905b006bb623cc5cf88837a6f9534bb2d48169044b2b2026de42139c
SHA512

e50ec1d5cac45cd010825790bc29a9b44f092abd53e46c309b6c4b64c7661e0a61d40df0f10eecdac06ee0c06299f1162419751158595fbd92bc3d7312521ebf
SSDEEP

12288:PlVTsPzUmKT0Jv5Bq/k7Y9ysILBP5guci/46:PLTsLMTHp9ysILBK9a4

Score

N/A

Malware Config

Signatures

Files

e207a333905b006bb623cc5cf88837a6f9534bb2d48169044b2b2026de42139c
.exe windows x86

56256e101f0698dbd31dcbb63b5c774f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
InterlockedExchange
CreateMutexA
Sleep
CreateFileA
lstrlenA
GetSystemDirectoryA
GetProcAddress
GetTickCount
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
GetCPInfo
GetSystemInfo
VirtualAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
CloseHandle
ReadFile
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
LoadLibraryA
GetACP
GetOEMCP
VirtualQuery

user32

FindWindowA
SetActiveWindow
EnableWindow
LoadBitmapA
wsprintfA

ws2_32

shutdown
WSAGetLastError

winmm

auxOutMessage

dnsapi

DnsModifyRecordsInSet_A

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 372KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56256e101f0698dbd31dcbb63b5c774f

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

winmm

dnsapi

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 372KB - Virtual size: 376KB

.rsrc Size: 8KB - Virtual size: 462KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 372KB - Virtual size: 376KB

.rsrc
Size: 8KB - Virtual size: 462KB