b6773b9f0b08d021eccff5236200e248fbbc48cb3d79a0604ba8368ed88982a3

General

Target

b6773b9f0b08d021eccff5236200e248fbbc48cb3d79a0604ba8368ed88982a3
Size

20KB
MD5

01db51ae97393aac7cd94b02a41ab52f
SHA1

23c7aec5e2034b4ba24f0a6e29a79faa09311cc4
SHA256

b6773b9f0b08d021eccff5236200e248fbbc48cb3d79a0604ba8368ed88982a3
SHA512

3b3a43e206128784118ff3c0693689d16124277870fa47ec94ff147e5bda3617a9aa5fe2a5326e3575a9a16131a6d2f856138139f925c96e203c09f6fe2d527a
SSDEEP

192:IiuxCDsxCVMyxYyWA46r6Yi6cE7lwgqvmNDJGR5UoynMWMXKF0:XS016x61xWmNDJGRe2WMX

Score

N/A

Malware Config

Signatures

Files

b6773b9f0b08d021eccff5236200e248fbbc48cb3d79a0604ba8368ed88982a3
.exe windows x86

b7b1082eead720db662b2260930b17ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpQueryInfoA
InternetReadFile
InternetErrorDlg
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetConnectA

advapi32

RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyA

user32

PostThreadMessageA
GetDesktopWindow
GetMessageA

shlwapi

PathFileExistsA

msvcrt

strncpy
strlen
atoi
sprintf
_sleep
strrchr
strcat
exit
fwrite
fopen
strncmp
free
strstr
memset
realloc
malloc
fflush
_filelength
_strdup
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fclose

ws2_32

inet_ntoa
WSAStartup
gethostname
gethostbyname
WSACleanup

shell32

DoEnvironmentSubstA

kernel32

DeleteFileA
GetModuleFileNameA
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
CreateProcessA
GetVersionExA
FileTimeToSystemTime
GetCurrentThreadId
Sleep
CreateMutexA
GetLastError
GetLocalTime
FindFirstFileA
FileTimeToLocalFileTime

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b7b1082eead720db662b2260930b17ff

Headers

File Characteristics

Imports

wininet

advapi32

user32

shlwapi

msvcrt

ws2_32

shell32

kernel32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB