db18cf471ad6da8cc2c2c55624b77c722b600fe380ffa875b5c0fd52e90741b7

General

Target

db18cf471ad6da8cc2c2c55624b77c722b600fe380ffa875b5c0fd52e90741b7
Size

28KB
MD5

a51bc77a345b7f20a984d4ab2b11bae3
SHA1

71d4ec80cfb19c9f0a64060ac25426eb462dc887
SHA256

db18cf471ad6da8cc2c2c55624b77c722b600fe380ffa875b5c0fd52e90741b7
SHA512

790e43e0ca0c97fac21fded71d821cb3d8ef48e8eca1d3615785a40d1b2f9edd7c753256b8746f5d2b473070c25ce62032dc5433d428619e8e5e9146c6f27af4
SSDEEP

384:PQFeSIm8mlfP7NnpnIyzdX9+mLvEvDoB:YtxpnI8X9PLvoDo

Score

N/A

Malware Config

Signatures

Files

db18cf471ad6da8cc2c2c55624b77c722b600fe380ffa875b5c0fd52e90741b7
.exe windows x86

68c38664a967088ca84b787293fc91db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
ReadFile
PeekNamedPipe
GetModuleFileNameA
GetCurrentProcess
lstrlenA
OpenProcess
GetModuleHandleA
LCMapStringA
GetOEMCP
DuplicateHandle
CreateProcessA
TerminateThread
TerminateProcess
DisconnectNamedPipe
CreatePipe
CloseHandle
ExitThread
CreateThread
WaitForMultipleObjects
GetVersionExA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
WriteFile
FreeLibrary
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
HeapFree
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringW

user32

ExitWindowsEx

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
CreateServiceA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetServiceStatus
OpenProcessToken

ws2_32

WSAStartup
socket
htonl
htons
recv
listen
WSACleanup
send
accept
closesocket
select
bind

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

68c38664a967088ca84b787293fc91db

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB