dadd46fab04b4f4627ecfaf4dce6e9b756dd6993bd397b8c694d728429b20521

General

Target

dadd46fab04b4f4627ecfaf4dce6e9b756dd6993bd397b8c694d728429b20521
Size

30KB
MD5

cdee56619abeec82f410c18bf0824bdf
SHA1

e6063248f5bf7f1fdc847d45abd488c73b7a5e71
SHA256

dadd46fab04b4f4627ecfaf4dce6e9b756dd6993bd397b8c694d728429b20521
SHA512

1b3f5b48a00158d36d16bb3c1cee1c465a67b113477285de3783f006de4b9da0d184609165c476e60723aa2f5967fcc153186a7b7fce877d7d400a640bef2603
SSDEEP

384:ZRlsp6apINBKEpH50ZB2Ywy25S/ladtyaS:vlQ6aCdYTsHY

Score

N/A

Malware Config

Signatures

Files

dadd46fab04b4f4627ecfaf4dce6e9b756dd6993bd397b8c694d728429b20521
.exe windows x86

daf8f73e94b7bb2e7f550c7c04fc0d41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetUserNameA
RegCloseKey
RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CreateMutexA
CreateProcessA
CreateToolhelp32Snapshot
ExitProcess
ExpandEnvironmentStringsA
FindAtomA
GetAtomNameA
GetLastError
OpenProcess
Process32Next
ReleaseMutex
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
TerminateProcess

msvcrt

_stricmp
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fputs
fread
free
fwrite
malloc
memset
signal
sprintf
strcat
strcmp
strcpy
strlen

shell32

ShellExecuteA

user32

GetForegroundWindow
GetWindowTextA
SendMessageA

ws2_32

WSAStartup
connect
gethostbyname
htons
recv
send
socket

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

daf8f73e94b7bb2e7f550c7c04fc0d41

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

ws2_32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 1024B - Virtual size: 640B

.bss Size: - Virtual size: 192B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 1024B - Virtual size: 640B

.bss
Size: - Virtual size: 192B

.idata
Size: 2KB - Virtual size: 1KB