8fad80147facb68f4d8982b1cf19808054373d8b3a60380f134c0d05afe33a11

Sharing

Copy URL

Twitter E-mail

General

Target

8fad80147facb68f4d8982b1cf19808054373d8b3a60380f134c0d05afe33a11
Size

96KB
MD5

4714e85c2de73e403d2b437e2fbef312
SHA1

94001ca0d23b1f7e28a55f1ac9e7d0622bce236a
SHA256

8fad80147facb68f4d8982b1cf19808054373d8b3a60380f134c0d05afe33a11
SHA512

37c49dfa57fa76894929e9694a4f6332b78d2fd749e8d78df72baa04f2799e2f54b36fa91c9c682969f982a2722cd8e5cf76d9dd79499588a9c12571d327a7e5
SSDEEP

1536:1mfhOBHeBFPbzN7F2sL1tI9NcmETO5A2oTM9GLD9f+s:1FeBFPV79HI9uxTmGLD92s

Score

N/A

Malware Config

Signatures

Files

8fad80147facb68f4d8982b1cf19808054373d8b3a60380f134c0d05afe33a11
.exe windows x86

13d0ab56e6e7d1a6d22adc50f6d05543

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
GetExitCodeProcess
Sleep
CreateProcessA
DeleteFileA
GetTempPathA
CopyFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetStartupInfoA
GetStdHandle
CreateEventA
GetModuleFileNameA
SetEvent
Process32First
Process32Next
WriteFile
ResetEvent
CreateThread
CreatePipe
GetFileSize
GetComputerNameA
lstrcpyA
lstrlenA
CreateWaitableTimerA
GetSystemTimeAsFileTime
SetWaitableTimer
WaitForSingleObject
PeekNamedPipe
VirtualFree
CloseHandle
VirtualAlloc
GetLastError
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
SetStdHandle
LCMapStringW
LCMapStringA
lstrcatA
ReadFile
CreateFileA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetFilePointer
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCPInfo

advapi32

CryptHashData
CryptGetHashParam
CryptSetHashParam
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
CryptDuplicateKey
CryptSetKeyParam
CryptEncrypt
CryptGenRandom
CryptAcquireContextA
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptCreateHash
CryptDestroyHash

ws2_32

send
closesocket
WSACleanup
WSAStartup
WSASocketA
htons
gethostbyname
WSAConnect
recv
shutdown

wininet

HttpQueryInfoA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA

crypt32

CryptStringToBinaryA
CryptBinaryToStringA

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13d0ab56e6e7d1a6d22adc50f6d05543

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

wininet

crypt32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 45KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 45KB