b232f4ee83e22f557ae7c0cb5502b4ec20b23e5ea1f68cc3ec7bc7a16357cd92

Sharing

Copy URL Twitter E-mail

General

Target

b232f4ee83e22f557ae7c0cb5502b4ec20b23e5ea1f68cc3ec7bc7a16357cd92
Size

49KB
MD5

f7cf44a0dfc167eef021a124e50d07a3
SHA1

a178cdd25a7adacbb3cc63be6b58e382ebdb8a0d
SHA256

b232f4ee83e22f557ae7c0cb5502b4ec20b23e5ea1f68cc3ec7bc7a16357cd92
SHA512

cd156f1d1df4827ca805f4821775a0122735c4499f11831ff2be6217fda8a48975c7a912c4d3757a2ebd026fe6a25df897a626fa9376a86bf1520439aeabdd74
SSDEEP

1536:O7esc1AOAZ85dkoELEkmlcyP1SNhQpbthmUUUUU:OO11LymlGNhWth

Score

N/A

Malware Config

Signatures

Files

b232f4ee83e22f557ae7c0cb5502b4ec20b23e5ea1f68cc3ec7bc7a16357cd92
.exe windows x86

40b66ca4ff24e204cbf51fc8c33e2ec1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CopyFileA
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
CreateFileA
lstrcpyA
GetSystemDirectoryA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
GetVersionExA
DeleteFileA
GetProcAddress
LoadLibraryA
WriteFile
CloseHandle
Sleep
GetLastError
lstrcatA
GetSystemTime
CreateFileW
HeapReAlloc
HeapAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
GetModuleHandleW
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
HeapSize
RtlUnwind
FlushFileBuffers

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyA

shell32

ShellExecuteA

ws2_32

socket
connect
send
recv
WSAStartup
htons
gethostbyname

shlwapi

SHDeleteKeyA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

40b66ca4ff24e204cbf51fc8c33e2ec1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

ws2_32

shlwapi

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB