144aa1d31b081e3ee3686019cfe2a78fdfa44b247cd3f2835536528ccd929a39

Sharing

Copy URL Twitter E-mail

General

Target

144aa1d31b081e3ee3686019cfe2a78fdfa44b247cd3f2835536528ccd929a39
Size

258KB
MD5

f6c2fc9200754afe1be2f7eb425e9dce
SHA1

dff6ae9104e71906f21f528afe640005ccfc706c
SHA256

144aa1d31b081e3ee3686019cfe2a78fdfa44b247cd3f2835536528ccd929a39
SHA512

1a08b3dcbacebc5828416b35672785d56a5adc398e9ce7a97520b655ee008c656ceb8e659f3ebf7c1d460dfea3d749801028f185fc6d277b9a43960e31575caf
SSDEEP

6144:syqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:jqID/PZLob+lBpdXYmSq+STH

Score

N/A

Malware Config

Signatures

Files

144aa1d31b081e3ee3686019cfe2a78fdfa44b247cd3f2835536528ccd929a39
.exe windows x86

69a13c815b27c3c264a4065ee441bf7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
gethostbyname
WSASetLastError
ioctlsocket
WSACleanup
listen
htonl
WSAGetLastError
socket
recv
getsockopt
closesocket
connect
select
accept
getservbyname
ntohs
__WSAFDIsSet
htons
inet_addr
getsockname
bind
WSAStartup
inet_ntoa
send
gethostbyaddr

user32

LoadStringA

advapi32

OpenThreadToken
RegOpenKeyExA
RegCloseKey
GetUserNameA
GetTokenInformation
RegQueryValueExA

wininet

DetectAutoProxyUrl

kernel32

CreateMutexW
CreateDirectoryA
SetUnhandledExceptionFilter
GetStringTypeExA
FindNextFileW
IsDebuggerPresent
FindClose
GetSystemTimeAsFileTime
FormatMessageW
GlobalFree
GetModuleHandleW
CreateFileW
FindFirstFileW
GetTempPathW
CloseHandle
GetTempFileNameW
ReleaseMutex
GetCurrentThreadId
GetCurrentDirectoryA
LCMapStringA
LocalFree
GetUserDefaultLCID
GetFileSize
WaitForSingleObject
CreateDirectoryW
GetSystemDirectoryA
FindNextFileA
FreeLibrary
FindFirstFileA
UnhandledExceptionFilter
CreateThread
VirtualAllocEx

ole32

CoTaskMemFree

shlwapi

PathIsRootA
UrlIsOpaqueA
PathFileExistsW
PathUnExpandEnvStringsW
SHEnumKeyExA
wvnsprintfA
SHRegGetBoolUSValueA
PathGetDriveNumberW
SHRegOpenUSKeyA
StrToInt64ExW
PathIsUNCA
SHEnumKeyExW
PathRemoveBlanksW
StrCpyW
PathStripPathA
SHRegOpenUSKeyW
UrlGetLocationW
PathUnquoteSpacesW
PathCompactPathA
StrChrIA
PathRemoveFileSpecW
PathRemoveBackslashA
SHDeleteValueW
StrCmpNIA
PathFindSuffixArrayW
PathParseIconLocationA
SHDeleteOrphanKeyW
PathIsContentTypeA
PathAddBackslashA
UrlEscapeA

msvidc32

DriverProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nArKE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EidghC
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zMUtSyu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.BkBuz
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bMdnwX
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UKlwzpc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YEGEfQd
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 214KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bJSP
Size: 512B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NzDSm
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yYxo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oDFQhQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69a13c815b27c3c264a4065ee441bf7b

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

user32

advapi32

wininet

kernel32

ole32

shlwapi

msvidc32

Sections

.text Size: 19KB - Virtual size: 19KB

.nArKE Size: 3KB - Virtual size: 2KB

.EidghC Size: 2KB - Virtual size: 1KB

.zMUtSyu Size: 1KB - Virtual size: 1KB

.BkBuz Size: 2KB - Virtual size: 2KB

.bMdnwX Size: 1024B - Virtual size: 855B

.rdata Size: 2KB - Virtual size: 2KB

.UKlwzpc Size: 1KB - Virtual size: 1KB

.YEGEfQd Size: 1024B - Virtual size: 880B

.data Size: 214KB - Virtual size: 1.1MB

.rsrc Size: 3KB - Virtual size: 2KB

.bJSP Size: 512B - Virtual size: 427B

.NzDSm Size: 2KB - Virtual size: 1KB

.yYxo Size: 1KB - Virtual size: 1KB

.oDFQhQ Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.nArKE
Size: 3KB - Virtual size: 2KB

.EidghC
Size: 2KB - Virtual size: 1KB

.zMUtSyu
Size: 1KB - Virtual size: 1KB

.BkBuz
Size: 2KB - Virtual size: 2KB

.bMdnwX
Size: 1024B - Virtual size: 855B

.rdata
Size: 2KB - Virtual size: 2KB

.UKlwzpc
Size: 1KB - Virtual size: 1KB

.YEGEfQd
Size: 1024B - Virtual size: 880B

.data
Size: 214KB - Virtual size: 1.1MB

.rsrc
Size: 3KB - Virtual size: 2KB

.bJSP
Size: 512B - Virtual size: 427B

.NzDSm
Size: 2KB - Virtual size: 1KB

.yYxo
Size: 1KB - Virtual size: 1KB

.oDFQhQ
Size: 1KB - Virtual size: 1KB