deefc774686f8a71a7b91294798e729904c1852a29e410f1786d7a386365bbde

General

Target

deefc774686f8a71a7b91294798e729904c1852a29e410f1786d7a386365bbde
Size

68KB
MD5

3c2fb3c8a825780fcbf5b9f7397da4fb
SHA1

1c2eb48c17bfa4496d75407acab3d00fa5cd36dc
SHA256

deefc774686f8a71a7b91294798e729904c1852a29e410f1786d7a386365bbde
SHA512

f57fb7c2631337d35900c10b8f479f2fc083ba3e03a3cec7dff468ec8c8e2b547aa041d8b15ad7723b8396633be76593f0fd3b661fbaf0c4a6b422c9ec6bbe4e
SSDEEP

768:KfYsXArloOPo6+AUqW54sEfBHf/SsSIQopwLwTuxaDOu4wLD5eEys5DL:KQLm3AUqWKVH3SsqLwTuxaiuLDMcL

Score

N/A

Malware Config

Signatures

Files

deefc774686f8a71a7b91294798e729904c1852a29e410f1786d7a386365bbde
.exe windows x86

62258a2aaf2e5aab8dff9ac0ae877f19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
FileTimeToSystemTime
GetVersion
GetProfileStringW
lstrcmpiA
LCMapStringA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
VirtualAlloc
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
HeapAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
LCMapStringW

shlwapi

PathIsURLA
UrlIsA
PathCreateFromUrlA
StrStrA
StrCmpNIA
StrRetToBufA

ws2_32

gethostname
getsockname
WSACreateEvent
WSASocketA
htons
socket
shutdown
setsockopt
sendto
gethostbyname
WSAConnect

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62258a2aaf2e5aab8dff9ac0ae877f19

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ws2_32

Sections

.text Size: 40KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 374KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 40KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 374KB

.rsrc
Size: 12KB - Virtual size: 9KB