97c7bb46689163cf543b90ffc96e87029c9c2dac1c572c5694aa1827e6893203

General

Target

97c7bb46689163cf543b90ffc96e87029c9c2dac1c572c5694aa1827e6893203
Size

24KB
MD5

ab7f4bdc2a2da81ca121424527fc3f5d
SHA1

d1a105144f2cdc22e26f52dd24484172865828fc
SHA256

97c7bb46689163cf543b90ffc96e87029c9c2dac1c572c5694aa1827e6893203
SHA512

aa3cb7f60a6e912e4261c6a5e3f2dcbe23a1c6bc79bf5351a211f2e74381f0d7cf282563a9d36fd0fc524db705a6d76ca091e31db92756ffa904c41fbd7ec7ee
SSDEEP

192:nf30T6Tt3uqvubgNmu9yq0O1oK53n5nLgSnyo1oyFUnlYKDp:nlR+bbg0u9f0OeK53pLgSnh1YWKDp

Score

N/A

Malware Config

Signatures

Files

97c7bb46689163cf543b90ffc96e87029c9c2dac1c572c5694aa1827e6893203
.exe windows x86

d16ac77af51aaa3368075058bbd9a44b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
CreatePipe
GetWindowsDirectoryA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
CloseHandle
ReadFile
lstrcatA
GetSystemDirectoryA
lstrcpyA

user32

GetWindowThreadProcessId
EnumWindows
DispatchMessageA
TranslateMessage
PeekMessageA
LoadStringA
PostMessageA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA

rasapi32

RasSetEntryPropertiesA
RasGetEntryPropertiesA
RasDeleteEntryA
RasDialA
RasEnumConnectionsA
RasGetConnectStatusA
RasHangUpA

wininet

InternetSetOptionA

msvcrt

_strupr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
time
malloc
_strrev
strlen
_itoa
atoi
strchr
memset
strcpy
strstr
srand
_ltoa
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
atol

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d16ac77af51aaa3368075058bbd9a44b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rasapi32

wininet

msvcrt

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB