764d26f9845eb33c42a53394735bae4a4dc3074c47a421126134a69ed78dccaf

General

Target

764d26f9845eb33c42a53394735bae4a4dc3074c47a421126134a69ed78dccaf
Size

48KB
MD5

d9ec599302c552fde4a6c06d0821a061
SHA1

b7e9df4837fc5d4e13e16d3f7626ddc451bb7032
SHA256

764d26f9845eb33c42a53394735bae4a4dc3074c47a421126134a69ed78dccaf
SHA512

25557dfacb1f97b785ddecb7a41726d4bebf8892109b5b21c8b68d626c358a0d79f52ce0a92efc3e304f510747e874229e1224d12b5019e835f643b415671eae
SSDEEP

768:tpsLTLQMsj7IU+Ms0LaWeSbTIXMaZ0M+Xw4FrQmFnt3:tps/wCSw8W0lF91t3

Score

N/A

Malware Config

Signatures

Files

764d26f9845eb33c42a53394735bae4a4dc3074c47a421126134a69ed78dccaf
.exe windows x86

599334b7d65d30762e0610d9458c5624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WinExec
GetTempPathA
CloseHandle
WaitForSingleObject
Process32Next
lstrcmpiA
Process32First
GetCurrentProcessId
GetCurrentProcess
GetWindowsDirectoryA
ExitProcess
CopyFileA
DeleteFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetTickCount
LoadLibraryA
GetProcAddress
Sleep
CreateToolhelp32Snapshot
ExitThread
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
SetFilePointer
GetLastError
GetStringTypeW
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA

ws2_32

__WSAFDIsSet
recv
WSAIoctl
gethostname
inet_ntoa
socket
send
WSAStartup
select
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
WSASocketA
connect

shlwapi

PathRemoveFileSpecA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

599334b7d65d30762e0610d9458c5624

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

shlwapi

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB