cbe672f198df97241ff1aa450debc5caa7423b832a166823bb9a429dcaf9a517

Sharing

Copy URL Twitter E-mail

General

Target

cbe672f198df97241ff1aa450debc5caa7423b832a166823bb9a429dcaf9a517
Size

56KB
MD5

84fedacb740709d4aea384ea14818014
SHA1

90f6d0b2376b980a87a754c33e054183db559d34
SHA256

cbe672f198df97241ff1aa450debc5caa7423b832a166823bb9a429dcaf9a517
SHA512

1ec137ca3a0314b06ba1cdfe8b34c9f7de0c10bcc86218956123b86e5e585eb50a816bcb9e879b3c253609e5ea7a602e98abc9632cdd587fc2e46bdada0a43ab
SSDEEP

768:4C+ebbPhQ7WcdcXa2jFkbb4vS0TxRGAa3j/GmyfPIedwWmPeuX2qy:4C+mmzdcXa2j2eZKE3uWmGuX2r

Score

N/A

Malware Config

Signatures

Files

cbe672f198df97241ff1aa450debc5caa7423b832a166823bb9a429dcaf9a517
.exe windows x86

7da11e585b19b1fca29f10a436372f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32.dll

WSASocketA
ord8
ord20
ord11
ord21
ord23
ord9
ord4
ord19
ord18
ord151
ord16
ord22
WSAIoctl
ord52
ord3
ord115

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetStartupInfoA
lstrcpyA
Sleep
GetTickCount
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
GetShortPathNameA
GetModuleFileNameA
GetEnvironmentVariableA
CloseHandle
TerminateProcess
CreateFileA
CopyFileA
GetLastError
DeviceIoControl
GlobalFree
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
WriteFile
ReadFile
GetFileSize
SetFileAttributesA
ExitProcess
lstrcmpiA
MoveFileA
SetErrorMode
lstrlenA
WaitForSingleObject
CreateThread
CreateMutexA
DeleteFileA
ReleaseMutex
OpenMutexA
InterlockedExchange
OutputDebugStringA
GetSystemDefaultUILanguage
GlobalMemoryStatusEx
GetCurrentProcessId
VirtualAlloc
VirtualQueryEx
ReadProcessMemory
GetThreadContext
SetThreadContext
WriteProcessMemory
VirtualProtectEx
VirtualFree
GetWindowsDirectoryA
GetVersionExA

user32

ExitWindowsEx
wsprintfA
wvsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
DeleteService
CreateServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

shlwapi

SHDeleteKeyA

msvcrt

_ui64toa
strcspn
atoi
_except_handler3
sprintf
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_strnicmp
__CxxFrameHandler
??3@YAXPAX@Z
puts
rand
srand
strncpy
??2@YAPAXI@Z
strstr
printf

shell32

ShellExecuteA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7da11e585b19b1fca29f10a436372f1c

Headers

File Characteristics

Imports

ws2_32.dll

kernel32

user32

advapi32

shlwapi

msvcrt

shell32

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 12KB - Virtual size: 12KB