908ba795d72f4420e70a8a872e29d487a20776db6f62c25f077a0ec7fd862a50

Sharing

Copy URL Twitter E-mail

General

Target

908ba795d72f4420e70a8a872e29d487a20776db6f62c25f077a0ec7fd862a50
Size

56KB
MD5

87d734d089271cad8c462725e6f11758
SHA1

c2fe263d944335dc7e5770e77e3233f806507bc6
SHA256

908ba795d72f4420e70a8a872e29d487a20776db6f62c25f077a0ec7fd862a50
SHA512

7f7476c880fbcdbb57e3985d91850e9c104813b49fc1e53a66b1214f8965abfe8166883357c428a678f8c3abba98a24c81065768aba5832ae164fa99e66e1d4c
SSDEEP

768:EQgehLsw4FnVcacK/Kv3fTiqeUB1gaavQJBPX93oEJ:NgKLsw4RZcK/GPuqeKgaMOP1o0

Score

N/A

Malware Config

Signatures

Files

908ba795d72f4420e70a8a872e29d487a20776db6f62c25f077a0ec7fd862a50
.exe windows x86

ca6a00ae584c83e4bcee4d6a41c43b2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
ReadFile
LocalFree
CreateProcessA
CreatePipe
lstrcpyA
GetSystemDirectoryA
GetWindowsDirectoryA
GetLastError
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
CreateDirectoryA
SetFileAttributesA
GetTempPathA
Sleep
WaitForSingleObject
DeleteFileA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
SetEnvironmentVariableA
GetStringTypeA
FlushFileBuffers
SetStdHandle
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

advapi32

SetServiceStatus
OpenSCManagerA
CreateServiceA
StartServiceCtrlDispatcherA
OpenServiceA
ControlService
QueryServiceStatus
QueryServiceConfigA
DeleteService
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegisterServiceCtrlHandlerA

shell32

ShellExecuteA

ws2_32

htons
connect
socket
recv
closesocket
WSAStartup
WSACleanup
send
inet_addr

rasapi32

RasEnumConnectionsA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca6a00ae584c83e4bcee4d6a41c43b2a

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ws2_32

rasapi32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 824B

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 824B