a15c52415e2afb00a26ed3e8e7bb31966585820021f2aaf6bec10ad8280a89f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a15c52415e2afb00a26ed3e8e7bb31966585820021f2aaf6bec10ad8280a89f5
Size

9KB
MD5

955d083d1e1d2610207cfd724315df4c
SHA1

e021fb24b573c649d526065b4a6cab033f2f79aa
SHA256

a15c52415e2afb00a26ed3e8e7bb31966585820021f2aaf6bec10ad8280a89f5
SHA512

27a4eb4028e7dd8d7a79565c9d22b483f2bf3341120923ba0f83eecce7c16e75fe7a3d2c29df071d831ff8a368c793d328cdedb1236cadf1aec5a9e085695175
SSDEEP

192:g3QhLyoO9Obud+v5/hIb/Fjy+JeOEMORg2RESnGr2Rts2GeeLAG3HQA17h0wvUoY:ggJyoO9Obud+vlhI/FO+JOawsVhrXQAq

Score

N/A

Malware Config

Signatures

Files

a15c52415e2afb00a26ed3e8e7bb31966585820021f2aaf6bec10ad8280a89f5
.exe windows x86

aa21d536a8a9bc44ef76be15c6b83e16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateThread
WaitForSingleObject
GetSystemInfo
LoadLibraryA
GetProcAddress
CopyFileA
Sleep
GetCurrentProcessId
CloseHandle
GetTickCount
GetModuleHandleA
GetStartupInfoA

advapi32

OpenServiceA
DeleteService
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

gethostbyname
select
inet_addr
recv
WSAIoctl
closesocket
WSASocketA
setsockopt
sendto
WSAStartup
htons
socket
connect
send
__WSAFDIsSet

iphlpapi

GetIfTable

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
__CxxFrameHandler
_CxxThrowException
sprintf
??2@YAPAXI@Z
strstr
rand
??3@YAXPAX@Z
localtime
time
atoi

Sections

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE