97130fbe71dca06b05cac565506d4212fcfcfdc0d25dcce9e7a9f07e832115f5

General

Target

97130fbe71dca06b05cac565506d4212fcfcfdc0d25dcce9e7a9f07e832115f5
Size

24KB
MD5

08d10d4809c945a69785aa56b2781520
SHA1

3127254eb13caf96ea7d9f232932667c51501c8a
SHA256

97130fbe71dca06b05cac565506d4212fcfcfdc0d25dcce9e7a9f07e832115f5
SHA512

1f924c7fce9d9f31d71b7545f3724c2ec34746c8cf3d4a137fb232b2f334da4bbeaea83ce5e19b4057aef146f3933f474ee2b5fd9e60469d1e4b6c873999636e
SSDEEP

192:VQK62HN25ZdOirpB50S7OfH+beYiXGB6bx6lNV+LWyt0Lt6jITpWVnhr:VBKXXafebeLWYkdWV

Score

N/A

Malware Config

Signatures

Files

97130fbe71dca06b05cac565506d4212fcfcfdc0d25dcce9e7a9f07e832115f5
.exe windows x86

d0f051d840685b6f770a4d8946b5e961

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
SetEvent
Sleep
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
TerminateProcess
CreateEventA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateProcessA
lstrcpyA
lstrlenA
GetSystemTime
GetTempPathA
DeleteFileA
ExitProcess
CreateMutexA
GetLastError

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueA

ws2_32

inet_addr
htons
recv
closesocket
connect
WSACleanup
socket
gethostbyname
inet_ntoa
WSAStartup
send

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

msvcrt

free
fopen
fwrite
fclose
__dllonexit
_ftol
_beginthread
rand
_onexit
??2@YAPAXI@Z
strstr
_endthread
__CxxFrameHandler

wininet

DeleteUrlCacheEntry

urlmon

URLDownloadToFileA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0f051d840685b6f770a4d8946b5e961

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcp60

msvcrt

wininet

urlmon

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 11KB

.CRT Size: 4KB - Virtual size: 32KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 11KB

.CRT
Size: 4KB - Virtual size: 32KB