0c84e0a5ea9be115b7d30a0f19db53dfa2bd1e8c57b4db685b9924219ae69a43

General

Target

0c84e0a5ea9be115b7d30a0f19db53dfa2bd1e8c57b4db685b9924219ae69a43
Size

28KB
MD5

1b3267327b953be7474b2ae6c65bea90
SHA1

9abce6d2084ab30dc0430493fea26dcb8abd91c0
SHA256

0c84e0a5ea9be115b7d30a0f19db53dfa2bd1e8c57b4db685b9924219ae69a43
SHA512

1d8e89ea9fd16d9b501e41c61db9c65f79f5591863a30199196e535c5b69e1c752d1dc301ec5a7935fd63ac2cb095c13805a90430ebf61f2141ec4efcb4cf575
SSDEEP

192:gOK62HN25ZdOirpB50S7OfH+beYiXGB6bx6lNV+LWyt0LtJITpWVnhraR:gfKXXafebeLWsdWVIR

Score

N/A

Malware Config

Signatures

Files

0c84e0a5ea9be115b7d30a0f19db53dfa2bd1e8c57b4db685b9924219ae69a43
.exe windows x86

d0f051d840685b6f770a4d8946b5e961

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
SetEvent
Sleep
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
TerminateProcess
CreateEventA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateProcessA
lstrcpyA
lstrlenA
GetSystemTime
GetTempPathA
DeleteFileA
ExitProcess
CreateMutexA
GetLastError

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueA

ws2_32

inet_addr
htons
recv
closesocket
connect
WSACleanup
socket
gethostbyname
inet_ntoa
WSAStartup
send

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

msvcrt

free
fopen
fwrite
fclose
__dllonexit
_ftol
_beginthread
rand
_onexit
??2@YAPAXI@Z
strstr
_endthread
__CxxFrameHandler

wininet

DeleteUrlCacheEntry

urlmon

URLDownloadToFileA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dittavr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0f051d840685b6f770a4d8946b5e961

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcp60

msvcrt

wininet

urlmon

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 11KB

.CRT Size: 4KB - Virtual size: 32KB

dittavr Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 11KB

.CRT
Size: 4KB - Virtual size: 32KB

dittavr
Size: - Virtual size: 4KB