9c4d8798b481cbadffc6b60da42c1efdd8efb7a88b9b4661c4f283bfca77995e

Sharing

Copy URL Twitter E-mail

General

Target

9c4d8798b481cbadffc6b60da42c1efdd8efb7a88b9b4661c4f283bfca77995e
Size

164KB
MD5

46079046ca29bb7a9d409e043fe05339
SHA1

c7f9653cf51646e2d257f26e59a2e75a08234d4d
SHA256

9c4d8798b481cbadffc6b60da42c1efdd8efb7a88b9b4661c4f283bfca77995e
SHA512

5058d8d7c0d26af75e694e139ffdcd22f0df8a70774372aa30132945c96fe2d575bd53a54fdc5b56b901c18b8a1228110efab05b226b8a66b76cd84664512c76
SSDEEP

3072:MZKoCs9doBWhRE/L4hY9J82foSzq0Wtwz+4noxuQ0Na/cq9Z:8KWWB6E/AYjtGuz+42Z/c

Score

N/A

Malware Config

Signatures

Files

9c4d8798b481cbadffc6b60da42c1efdd8efb7a88b9b4661c4f283bfca77995e
.exe windows x86

f5123953b4a5bc63c26a1b7287153020

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetSystemDirectoryA
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetProfileStringW
GetLocalTime
lstrcatA
GetFileAttributesA
SetFileAttributesA
CreateFileW
SetFilePointer
GetFileSize
ReadFile
GetCPInfo
CloseHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess

user32

RegisterClassExA
LoadImageA
ReleaseCapture
LoadIconW
DrawIcon
GetMessageA
GetCursorPos
GetWindowLongA
CallWindowProcW
GetClassInfoExA
AppendMenuA
TrackPopupMenu
GetFocus
SetFocus
WindowFromPoint

gdi32

CreateSolidBrush
CreateRectRgnIndirect
Rectangle
RestoreDC
SaveDC
ExtTextOutA
CreateFontIndirectA
StartDocA
EndPage
CreatePatternBrush

ws2_32

getservbyport
getservbyname
getprotobynumber
getpeername
getsockname
htons
shutdown
setsockopt
sendto
gethostbyname
WSACleanup
WSAStartup
socket

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5123953b4a5bc63c26a1b7287153020

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 56KB - Virtual size: 127KB

.adata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 56KB - Virtual size: 127KB

.adata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB