8f7ea8b0829641436099a25333cf61ef396f44b5d82a75534a96ca60e942f3b7

Sharing

Copy URL Twitter E-mail

General

Target

8f7ea8b0829641436099a25333cf61ef396f44b5d82a75534a96ca60e942f3b7
Size

1.2MB
MD5

a94bb82eb75581e19291af6f87c398de
SHA1

508bad77b4e848b220656e955fa986895acf2559
SHA256

8f7ea8b0829641436099a25333cf61ef396f44b5d82a75534a96ca60e942f3b7
SHA512

ddc19105c81372e0867bf34affec68faaf35838461dea4ceed8993dcca287c55f57451418bbff0c08c4b36441ccd57bdd1572a8ae863cd33cf510bb7903b36e2
SSDEEP

24576:4ZkuSxyG1b9U1yQvemP7u+inL81gu2eZIL0DaZ4:NvRUIQvtPogmu2eZIwg4

Score

N/A

Malware Config

Signatures

Files

8f7ea8b0829641436099a25333cf61ef396f44b5d82a75534a96ca60e942f3b7
.exe windows x86

7623943f9e25814d79c7583f9ebc1216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
GetPrivateProfileSectionA
DeleteFileA
GetEnvironmentVariableA
SetCurrentDirectoryA
SetEnvironmentVariableA
OutputDebugStringA
GetLastError
CreateDirectoryA
GetFileAttributesA
LocalReAlloc
GetCurrentDirectoryA
GetOverlappedResult
WaitForMultipleObjects
ReadFile
CreateEventA
CreateNamedPipeA
CreateProcessA
WaitForSingleObject
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
LocalAlloc
CloseHandle
CreateFileA
RtlUnwind
IsProcessorFeaturePresent
GetCommandLineA
HeapAlloc
IsDebuggerPresent
HeapCreate
GetModuleHandleW
WriteFile
GetFileAttributesW
GetModuleFileNameW
TlsGetValue
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetProcAddress
MapViewOfFileEx
UnmapViewOfFile
RaiseException
GetProcessHeap
HeapFree
SetFilePointer
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
VirtualFree
GetLogicalDrives
GetModuleHandleA
GetVolumePathNameW
ReadDirectoryChangesW
ResetEvent
VerSetConditionMask
VerifyVersionInfoA
GetStdHandle
RemoveDirectoryA

advapi32

RegSetValueA
RegCloseKey
GetFileSecurityW
GetSecurityDescriptorGroup
RegEnumValueW
RegOpenKeyExW
RegQueryValueExA
RegCreateKeyA

shell32

SHGetFileInfoW
SHFileOperationW
ShellExecuteExW

msvcrt

puts
wcslen
wcscat
strncmp
malloc
strstr
strchr
memset
free
isspace
calloc
mbtowc
localeconv
realloc
strrchr
tolower
isleadbyte
wcstombs
getenv
atoi
memchr
strlen
strncpy

shlwapi

AssocQueryKeyW
AssocQueryStringW

ws2_32

shutdown
WSAAddressToStringA
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSARecvFrom
WSASend
WSASendTo
WSAStringToAddressA
WSAWaitForMultipleEvents
accept
closesocket
connect
freeaddrinfo
getnameinfo
getpeername
getservbyname
getsockname
getsockopt
ioctlsocket
listen
send
socket
setsockopt

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7623943f9e25814d79c7583f9ebc1216

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

msvcrt

shlwapi

ws2_32

Sections

.text Size: 136KB - Virtual size: 134KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 60KB - Virtual size: 2.2MB

.rsrc Size: 80KB - Virtual size: 78KB

.text
Size: 136KB - Virtual size: 134KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 60KB - Virtual size: 2.2MB

.rsrc
Size: 80KB - Virtual size: 78KB