a7930ed927bdf4dc63d587a13948ec497ff7e6efa0ba310e12c0680f458e8692

Sharing

Copy URL

Twitter E-mail

General

Target

a7930ed927bdf4dc63d587a13948ec497ff7e6efa0ba310e12c0680f458e8692
Size

15KB
MD5

538444c7a179e5f92d32b0cc6adefda3
SHA1

58b6b514ffd1a9309b917a9c53e5d4cf2a816f53
SHA256

a7930ed927bdf4dc63d587a13948ec497ff7e6efa0ba310e12c0680f458e8692
SHA512

5f432e7bfc6e9a253e1f8850dcae4085ebd3e9037f3e53c4a7fc6673b2fdb0549f9bebee554725dc736ae0a9c0416156c0cf3a9b99e874146d8945918b771b2a
SSDEEP

384:lGkoqmst26IbZPgEwXhMbXkzKbK6lvV5:8xw26IbWE2MjbK6lvV5

Score

N/A

Malware Config

Signatures

Files

a7930ed927bdf4dc63d587a13948ec497ff7e6efa0ba310e12c0680f458e8692
.dll windows x86

4e18f33a61051382db0c8df5db330790

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2915
ord354
ord5186
ord1200
ord5773
ord5442
ord353
ord6385
ord1979
ord665
ord823
ord825
ord860
ord356
ord287
ord6139
ord2770
ord610
ord668
ord2781
ord4058
ord3178
ord3319
ord3305
ord3311
ord3011
ord536
ord941
ord924
ord1247
ord540
ord2818
ord2764
ord4129
ord858
ord800
ord5710

msvcrt

printf
strcpy
memset
atoi
__CxxFrameHandler
_EH_prolog
strcat
_strnicmp
strncpy
memcpy
strtok
free
strlen
malloc
_initterm
_adjust_fdiv

kernel32

CreateProcessA
TerminateThread
GetSystemDirectoryA
ExitThread
FindFirstFileA
FindClose
SetFileAttributesA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetDriveTypeA
GetLastError
GetExitCodeThread
CreateThread
Sleep
TerminateProcess
WaitForMultipleObjects
CreatePipe
GetVersionExA
DuplicateHandle
GetCurrentProcess
DisconnectNamedPipe
ReadFile
PeekNamedPipe
WriteFile
DeleteFileA
OpenProcess
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateMutexA
CloseHandle
SetFileTime

user32

ExitWindowsEx
wsprintfA

advapi32

RegSetValueExA
DeleteService
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCreateKeyExA
RegDeleteKeyA
OpenProcessToken

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

wsock32

send
setsockopt
connect
gethostbyname
socket
WSAGetLastError
ioctlsocket
WSAStartup
closesocket
recv
htons

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

My_Share
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e18f33a61051382db0c8df5db330790

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

shell32

urlmon

wsock32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 1016B

My_Share Size: 512B - Virtual size: 4B

.rsrc Size: 1024B - Virtual size: 728B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 1016B

My_Share
Size: 512B - Virtual size: 4B

.rsrc
Size: 1024B - Virtual size: 728B

.reloc
Size: 1KB - Virtual size: 1KB