ba95208ae48bc18766ff3e09057a97939c058bc51852cf18632ab3ae60faec86

Sharing

Copy URL

Twitter E-mail

General

Target

ba95208ae48bc18766ff3e09057a97939c058bc51852cf18632ab3ae60faec86
Size

224KB
MD5

40d88a19541a7d38f43fbca59abc9330
SHA1

9de764fb99e780d10d3567d135d6154dbdd7be3a
SHA256

ba95208ae48bc18766ff3e09057a97939c058bc51852cf18632ab3ae60faec86
SHA512

aeb7b16dd300df7ca97665e6bd3ed1e7685100add0e3ba1a13c5ff5e37c0a791789ea3b662fdf428d9deb9d5f9b6eb98f40379d4019cf772f7efc0c07b166aa2
SSDEEP

6144:zpL9iTYr3c2Ye2J8qEY1P1jmAQRkkWTKRp8X9u2I:lpiTYrr2J8qEY1P1tQ9HMQ2

Score

N/A

Malware Config

Signatures

Files

ba95208ae48bc18766ff3e09057a97939c058bc51852cf18632ab3ae60faec86
.exe windows x86

48125bce88f3e67e6e8c5c1f2ee46050

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_XcptFilter
__set_app_type
_controlfp
_exit
_onexit
__dllonexit
_CIpow
printf
_CIacos
calloc
_beginthreadex
_strupr
wcscpy
atoi
wcstombs
wcslen
mbstowcs
_access
rand
strncat
vsprintf
exit
??1type_info@@UAE@XZ
_CxxThrowException
fopen
??3@YAXPAX@Z
fwrite
fclose
strrchr
_except_handler3
free
malloc
_ftol
memmove
??2@YAPAXI@Z
__CxxFrameHandler
__p__fmode

kernel32

LocalFree
Sleep
CloseHandle
GetProcAddress
LoadLibraryA
WaitForSingleObject
SetEvent
InterlockedDecrement
GetLastError
MultiByteToWideChar
lstrlenA
CreateThread
WideCharToMultiByte
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
TerminateThread
CreateEventA

user32

SendMessageA
CreateWindowExA
PostThreadMessageA
IsWindow
GetMessageA

ws2_32

socket
gethostbyname
ntohs
recv
send
htons
connect
setsockopt
WSACleanup
WSAStartup
select
getsockname
gethostname
closesocket

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

ole32

CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
GetErrorInfo
VariantClear

msvfw32

ICSendMessage

winmm

waveInAddBuffer
waveOutClose
waveOutOpen
waveOutUnprepareHeader
waveInStart
waveOutPrepareHeader
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
waveOutWrite

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48125bce88f3e67e6e8c5c1f2ee46050

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ws2_32

msvcp60

ole32

oleaut32

msvfw32

winmm

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 32KB - Virtual size: 55KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 32KB - Virtual size: 55KB

.rsrc
Size: 4KB - Virtual size: 16B