ca9cdd741f7ec6fdff3f1dc91aae91c9ffc20522cc1c8feebeae3b9e8dfa349a

Sharing

Copy URL Twitter E-mail

General

Target

ca9cdd741f7ec6fdff3f1dc91aae91c9ffc20522cc1c8feebeae3b9e8dfa349a
Size

532KB
MD5

defae223cf0972ff17b00bd97526ac96
SHA1

90bf82059ed1d3b8bda9c2a512ab221a761b7ae1
SHA256

ca9cdd741f7ec6fdff3f1dc91aae91c9ffc20522cc1c8feebeae3b9e8dfa349a
SHA512

0680d5c9da603cf3da3a9484ea21be113673c2c90e0152bc92b7c63641bf936d884d1fc52ba5cc836cd6f70e90d0e71ba574e5972edf72c56206013931b95af1
SSDEEP

6144:rw3++P4kCGCFZTwORSiSzPbXXJnoSVoIaXksEBj5u3+pCK6:rw3bCnV5SHnWSVoIDsEBj5u3bT

Score

N/A

Malware Config

Signatures

Files

ca9cdd741f7ec6fdff3f1dc91aae91c9ffc20522cc1c8feebeae3b9e8dfa349a
.exe windows x86

393c6e436b57201707ede1e955710425

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
GetSystemDirectoryA
SetEndOfFile
GetLocaleInfoW
CopyFileA
GetOEMCP
GetACP
IsBadCodePtr
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLastError
CloseHandle
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
SetEnvironmentVariableA

user32

GetAsyncKeyState

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

wsock32

socket
ioctlsocket
htons
WSAStartup
send
recv
closesocket
WSACleanup
WSAGetLastError
connect

Sections

.text
Size: 460KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

393c6e436b57201707ede1e955710425

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wsock32

Sections

.text Size: 460KB - Virtual size: 458KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 16KB - Virtual size: 22KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 460KB - Virtual size: 458KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 16KB - Virtual size: 22KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 15KB