eaa655c12e64b6d3190a8ed3a01b9b0ff3ef36655000d22c4a74c839a5bf741c

Sharing

Copy URL Twitter E-mail

General

Target

eaa655c12e64b6d3190a8ed3a01b9b0ff3ef36655000d22c4a74c839a5bf741c
Size

328KB
MD5

3b11b2ef58f7781e282564b62fa0262e
SHA1

f56432596e82826c1554546d57c67841ac8d5689
SHA256

eaa655c12e64b6d3190a8ed3a01b9b0ff3ef36655000d22c4a74c839a5bf741c
SHA512

fc627533749df4dfd283a202873965e08afeee08c1fc83ec5abd55222f5405f5383ac964afdacb31a2e635be98a394c27de231790eeab654fe567efdc69dadfc
SSDEEP

6144:zCjEA3eGgIuRR0yjT4aoPTzrYeYGTJ7Ai3aTyI+EuqKxh:uN3e4uRRhoaoPTEoJ7xaTfKf

Score

N/A

Malware Config

Signatures

Files

eaa655c12e64b6d3190a8ed3a01b9b0ff3ef36655000d22c4a74c839a5bf741c
.exe windows x86

e9e2c926fdb9c58b8399be4d25788030

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
WSAStartup
setsockopt
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
htons
htonl
gethostbyname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
shutdown
WSACleanup

shlwapi

SHStrDupW
SHDeleteKeyA

winmm

waveOutMessage
waveOutGetDevCapsA
joyGetDevCapsA

kernel32

lstrlenA
CloseHandle
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreatePipe
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
WriteFileEx
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
MoveFileA
MoveFileExW
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenProcess
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
InitializeCriticalSection

user32

PostMessageA
RegisterWindowMessageA
MessageBoxA
EnumWindows
EnumDisplayDevicesA
IsWindow
GetWindowThreadProcessId
GetWindowLongA
GetDC
GetWindowInfo
GetSystemMetrics
GetClassNameA

gdi32

ExtEscape
DeleteDC
CreateDCA
GetDeviceCaps

advapi32

RegEnumKeyExW
CryptGenRandom
CryptReleaseContext
InitializeSecurityDescriptor
CloseServiceHandle
StartServiceA
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
OpenSCManagerA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
QueryServiceStatus
QueryServiceConfigA
OpenServiceA
CryptAcquireContextA

shell32

ShellExecuteExA
ShellExecuteA
SHGetFolderPathA

ole32

CoInitialize
CoSetProxyBlanket
CoUninitialize
PropVariantClear
CoCreateInstance

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString

Exports

Exports

AddClientDV
AddCrashHandlerLimitModule
AddDiagAssertModule
AllocAndFillProcessModuleList
BSUAnsi2Wide
BSUGetModuleBaseNameA
BSUGetModuleBaseNameW
BSUGetModuleFileNameExA
BSUGetModuleFileNameExW
BSUIsInteractiveUser
BSUSetCurrentThreadNameA
BSUSetCurrentThreadNameW
BSUSetThreadNameA
BSUSetThreadNameW
BSUSymInitializeA
BSUSymInitializeW
BSUWide2Ansi
CreateCurrentProcessCrashDumpA
CreateCurrentProcessCrashDumpW
DiagAssertA
DiagAssertW
DiagOutputA
DiagOutputW
GetFaultReason
GetFirstStackTraceString
GetLimitModuleCount
GetLimitModulesArray
GetLoadedModules
GetNextStackTraceString
GetProcessThreadIds
GetRegisterString
GetSuperAssertionCount
HookImportedFunctionsByNameA
HookImportedFunctionsByNameW
HookOrdinalExportA
HookOrdinalExportW
IsMiniDumpFunctionAvailable
IsNT
IsNT4
IsServer2003
IsServer2003orBetter
IsW2K
IsW2KorBetter
IsXP
IsXPorBetter
MemStressInitializeA
MemStressInitializeW
MemStressTerminate
SetCrashHandlerFilter
SetDiagAssertFile
SetDiagAssertOptions
SetDiagOutputFile
SnapCurrentProcessMiniDumpA
SnapCurrentProcessMiniDumpW
SuperAssertionA
SuperAssertionW
ValidateAllBlocks

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9e2c926fdb9c58b8399be4d25788030

Headers

File Characteristics

Imports

ws2_32

shlwapi

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB