977b16c7ac68761fe5756567bf38e94ccb47b2a154ee22d4e196703878c28707

General

Target

977b16c7ac68761fe5756567bf38e94ccb47b2a154ee22d4e196703878c28707
Size

40KB
MD5

c0f5c5ab64295988278cdada7575a23c
SHA1

925405b24191abb5b6d4b55a5d4876426b30276b
SHA256

977b16c7ac68761fe5756567bf38e94ccb47b2a154ee22d4e196703878c28707
SHA512

f4a0927bcc72bbfac90729c5ad5f141c9422f01601bc55ab3961005db331cdba351730acd1de795eb190d113ad7ea7b7835818f0e9f7a82f57603381bdd0ec23
SSDEEP

768:tOOzjPBrHMHgn7+1vDkQkICVkvZm/2JlHc:ttjPtMAn7+1LNlC6hJlHc

Score

N/A

Malware Config

Signatures

Files

977b16c7ac68761fe5756567bf38e94ccb47b2a154ee22d4e196703878c28707
.exe windows x86

1ae0e7481d753093c399b226f16a76a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
CreatePipe
GetStartupInfoA
CreateProcessA
Sleep
PeekNamedPipe
WriteFile
ReadFile
GetModuleHandleA
ExitProcess
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
SetEndOfFile
GetCPInfo
GetCommandLineA
GetVersionExA
HeapFree
CloseHandle
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetSystemInfo

advapi32

OpenServiceA
CloseServiceHandle
StartServiceCtrlDispatcherA
CreateServiceA
StartServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA

ws2_32

WSAStartup
socket
htons
bind
listen
recv
accept
send
closesocket

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ae0e7481d753093c399b226f16a76a7

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB