a1a0c6ec7de1cf60ad1775cf7ba270cd6f3448bfa22954854d251f27b1d58863

Sharing

Copy URL Twitter E-mail

General

Target

a1a0c6ec7de1cf60ad1775cf7ba270cd6f3448bfa22954854d251f27b1d58863
Size

798KB
MD5

2edbbf09c876df7826def655cb39ddd0
SHA1

2780278faa24db9e4ebc29e489627d54d93c69ba
SHA256

a1a0c6ec7de1cf60ad1775cf7ba270cd6f3448bfa22954854d251f27b1d58863
SHA512

814866239d998305558d52aa514a855a6c0e96aba403f1ab8270db0713ff758a95629560ce52075653aeb1f4f07cc547ace6a3c07856d74ea9c59b80d9d00623
SSDEEP

24576:n9YpRhDYoOaKbN0Xhs6GafHcYUHEaQ8o:nehcvH8hs6GaPR8o

Score

N/A

Malware Config

Signatures

Files

a1a0c6ec7de1cf60ad1775cf7ba270cd6f3448bfa22954854d251f27b1d58863
.exe windows x86

9882ac1ba8ce31a98f863920462ae54f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

gdi32

GetStockObject

shell32

SHBrowseForFolderA

ole32

CoInitialize

netapi32

NetApiBufferSize

wldap32

ord95

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oiu
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdsh
Size: - Virtual size: 6.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sock
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sock2
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xedr
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9882ac1ba8ce31a98f863920462ae54f

Headers

File Characteristics

Imports

kernel32

gdi32

shell32

ole32

netapi32

wldap32

Sections

.text Size: 727KB - Virtual size: 727KB

.oiu Size: 512B - Virtual size: 48B

.bdsh Size: - Virtual size: 6.2MB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 512B - Virtual size: 868B

.sock Size: 512B - Virtual size: 11B

.sock2 Size: 512B - Virtual size: 10B

.xedr Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 727KB - Virtual size: 727KB

.oiu
Size: 512B - Virtual size: 48B

.bdsh
Size: - Virtual size: 6.2MB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 512B - Virtual size: 868B

.sock
Size: 512B - Virtual size: 11B

.sock2
Size: 512B - Virtual size: 10B

.xedr
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB