b74a5902c58ea5f78aeccc8a2e45375654fe6c7dc48e16634caadc40daf5f223

Sharing

Copy URL Twitter E-mail

General

Target

b74a5902c58ea5f78aeccc8a2e45375654fe6c7dc48e16634caadc40daf5f223
Size

148KB
MD5

9f6452c5b7eb4770094a6dade96ceef5
SHA1

82d7bd5986dc7e97fee9259071181d7035d014b3
SHA256

b74a5902c58ea5f78aeccc8a2e45375654fe6c7dc48e16634caadc40daf5f223
SHA512

20a833f68cfdbc1c2183d944de57bec7f1f350d91bc88e76ae8fef9be3979e24a3a1b06546048749a005cec90e5bba00fbd25eb904f1618663a80a8c5f1dc08a
SSDEEP

3072:CGuhP6amSyWL+5FZ7QC0of4NY4rpKqx44tnhE5a:PIZyM+aBNQO2

Score

N/A

Malware Config

Signatures

Files

b74a5902c58ea5f78aeccc8a2e45375654fe6c7dc48e16634caadc40daf5f223
.exe windows x86

e4c442459efd255897bd137446d623f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recvfrom
send
recv
htons
getservbyport
getprotobynumber
socket
setsockopt
getservbyname
htonl

wtsapi32

WTSOpenServerA
WTSQueryUserToken
WTSCloseServer

uxtheme

GetThemeFont
GetThemeTextExtent
CloseThemeData

netapi32

NetWkstaGetInfo
NetWkstaSetInfo
NetGetAnyDCName
NetApiBufferFree

setupapi

SetupAddToDiskSpaceListA
SetupGetInfFileListA
SetupScanFileQueueA
SetupInstallFileA
SetupInstallFilesFromInfSectionA
SetupOpenAppendInfFileA
SetupOpenFileQueue
SetupCreateDiskSpaceListA
SetupGetSourceFileSizeA
SetupCloseFileQueue
SetupCloseInfFile
SetupCommitFileQueueA
SetupDecompressOrCopyFileA
SetupOpenInfFileA
SetupDestroyDiskSpaceList
SetupQueryDrivesInDiskSpaceListA
SetupRemoveFromDiskSpaceListA
SetupGetSourceFileLocationA

kernel32

FindNextChangeNotification
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetCurrentThread
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
HeapCreate
HeapDestroy
Sleep
GetTickCount
LoadLibraryA
GetProcAddress
WriteConsoleW
FindFirstChangeNotificationA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4c442459efd255897bd137446d623f7

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wtsapi32

uxtheme

netapi32

setupapi

kernel32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 56KB - Virtual size: 684KB

.rsrc Size: 4KB - Virtual size: 760B

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 56KB - Virtual size: 684KB

.rsrc
Size: 4KB - Virtual size: 760B