fb1494b61ab8b2d1cc8a046b3cd3f6979656dc505d628a4bd5c6072e34b5d222

Sharing

Copy URL Twitter E-mail

General

Target

fb1494b61ab8b2d1cc8a046b3cd3f6979656dc505d628a4bd5c6072e34b5d222
Size

92KB
MD5

c280fcf22f83bb71849cb9af5911f80b
SHA1

a9bee32bc501bdf35695a1ef152518d201a6a5e7
SHA256

fb1494b61ab8b2d1cc8a046b3cd3f6979656dc505d628a4bd5c6072e34b5d222
SHA512

9d1eadbd3cdbd8e3b41090c733d2fbd00382f8a034199f867d86fe19e1e9217ef065c4531fd91ab5faa0a6d049dd99b7a302d149a9dacc933ce806db4b7ae00b
SSDEEP

768:Rd61+VDwDJ5NpgLa1fFDsCGZHu9UXCSjlTsfP6KPGgcTLiz+k8co/vWb:vC+2wLazDhxeCqlsfiKPGgcPHcomb

Score

N/A

Malware Config

Signatures

Files

fb1494b61ab8b2d1cc8a046b3cd3f6979656dc505d628a4bd5c6072e34b5d222
.exe windows x86

7b3edb54a20d4b57edc06a5aed6932bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

BindMoniker

kernel32

AddAtomA
Beep
BackupRead
AddAtomW
CreateFileA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
SetUnhandledExceptionFilter

ws2_32

gethostbyaddr
WSAConnect
getprotobyname

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
sin
strcmp

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gzwjkoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ttcqvas
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nvnqtxu
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nvnqtxu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxhdlyn
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxhdlyn
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b3edb54a20d4b57edc06a5aed6932bc

Headers

File Characteristics

Imports

ole32

kernel32

ws2_32

msvcrt

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 480B

.rdata Size: 45KB - Virtual size: 44KB

.bss Size: - Virtual size: 480B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 664B

gzwjkoo Size: 512B - Virtual size: 4KB

ttcqvas Size: 512B - Virtual size: 4KB

nvnqtxu Size: 136KB - Virtual size: 136KB

nvnqtxu Size: 512B - Virtual size: 4KB

qxhdlyn Size: 512B - Virtual size: 4KB

qxhdlyn Size: 512B - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 480B

.rdata
Size: 45KB - Virtual size: 44KB

.bss
Size: - Virtual size: 480B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 664B

gzwjkoo
Size: 512B - Virtual size: 4KB

ttcqvas
Size: 512B - Virtual size: 4KB

nvnqtxu
Size: 136KB - Virtual size: 136KB

nvnqtxu
Size: 512B - Virtual size: 4KB

qxhdlyn
Size: 512B - Virtual size: 4KB

qxhdlyn
Size: 512B - Virtual size: 4KB