ccd5ef415d343571a1938dbeba784b1e7180f77db787cb9de94829e8dc25c48d

General

Target

ccd5ef415d343571a1938dbeba784b1e7180f77db787cb9de94829e8dc25c48d
Size

76KB
MD5

d89f2aeaeaeea84f66d409efaf6367af
SHA1

123d3a972a0c54d8fe58de1e1c6bda405aa23f6c
SHA256

ccd5ef415d343571a1938dbeba784b1e7180f77db787cb9de94829e8dc25c48d
SHA512

4290bd0de3059a5128972d19faa9e881e6498c6a04936373861dcdd2f8e939ace88f85d4b8950778cb8e23a14caa3f09f0292fcac68be50b422159220595d3ab
SSDEEP

1536:8RwwSe6b6hgpRsk9vVJr3XQiPnw3RNHbpKlqv:8BSJWhM/rnhmKlQ

Score

N/A

Malware Config

Signatures

Files

ccd5ef415d343571a1938dbeba784b1e7180f77db787cb9de94829e8dc25c48d
.exe windows x86

aabe051971628d5af15aeae19bdadf14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetModuleHandleA
Sleep
GetModuleFileNameA
WinExec
GetLastError
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
CloseHandle
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
ReadFile
LoadLibraryA
GetACP
GetOEMCP
InterlockedExchange
DeleteFileA

advapi32

CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
OpenSCManagerA
OpenServiceA
SetServiceStatus
ChangeServiceConfig2A

libcurl

curl_easy_setopt
curl_slist_append
curl_easy_perform
curl_easy_cleanup
curl_easy_init

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aabe051971628d5af15aeae19bdadf14

Headers

File Characteristics

Imports

kernel32

advapi32

libcurl

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 8KB