fe518763f2ab3bceb789e99fa0b61364a5a5ced0013a455ff54df5df6f221f15

Sharing

Copy URL Twitter E-mail

General

Target

fe518763f2ab3bceb789e99fa0b61364a5a5ced0013a455ff54df5df6f221f15
Size

144KB
MD5

546215a821a0148b30195b626c18eb51
SHA1

c23fabaaf8e571b3320b9283e0d5e73675f42ae6
SHA256

fe518763f2ab3bceb789e99fa0b61364a5a5ced0013a455ff54df5df6f221f15
SHA512

4c4b2b4fc845712e058ee4110b75aad7a03273ec66d7ee1454596e4c9c27500616cee330dc775bea158a4b0905bcf3ff27cb777c7309c6d0968081b1fa8dd56b
SSDEEP

3072:AY+iQEI45MjFNbP3dwyMmQGMdj8iUPyAAQsUcafK8Aeng6Q/tRBuUuFEPA7sp6P9:AClI9yxaBqcUsEPA7sp6Pr1fvIKEdTzc

Score

N/A

Malware Config

Signatures

Files

fe518763f2ab3bceb789e99fa0b61364a5a5ced0013a455ff54df5df6f221f15
.exe windows x86

2bd45a9d9bf5dae55f844a3fec4b9264

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comdlg32

GetOpenFileNameA

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateProcessA
CreateSemaphoreA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
GetCurrentProcessId
GetLastError
GetLocalTime
GetProcessHeap
GetStdHandle
GetTickCount
HeapAlloc
InterlockedDecrement
InterlockedIncrement
Module32First
Module32Next
OpenProcess
Process32First
Process32Next
ReleaseSemaphore
SetConsoleCursorPosition
SetConsoleTextAttribute
SetConsoleTitleA
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinExec
lstrcatA
lstrcpyA

msvcrt

_chdir
_getch
_itoa
_popen
_stat
_strlwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_vsnprintf
abort
atexit
atoi
atol
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
gets
malloc
memcpy
memset
perror
printf
remove
rename
signal
sprintf
strcat
strchr
strcmp
strcpy
strlen
strrchr
strstr
strtok
system

mpr

WNetAddConnection2A
WNetCancelConnection2A
WNetCloseEnum
WNetEnumResourceA
WNetOpenEnumA

shell32

SHGetSpecialFolderPathA

ws2_32

WSACleanup
WSAConnect
WSAGetLastError
WSASocketA
WSAStartup
__WSAFDIsSet
closesocket
connect
gethostbyname
gethostname
htons
inet_addr
inet_ntoa
ioctlsocket
recv
recvfrom
select
send
sendto
setsockopt
socket

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 83KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2bd45a9d9bf5dae55f844a3fec4b9264

Headers

File Characteristics

Imports

comdlg32

kernel32

msvcrt

mpr

shell32

ws2_32

Sections

.text Size: 82KB - Virtual size: 82KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 83KB

.idata Size: 4KB - Virtual size: 3KB

.text
Size: 82KB - Virtual size: 82KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 83KB

.idata
Size: 4KB - Virtual size: 3KB