aa7a4bb5e48e4d05d48a1db07876f530d33f7a8162a252114ed0adf3601ca692

Sharing

Copy URL Twitter E-mail

General

Target

aa7a4bb5e48e4d05d48a1db07876f530d33f7a8162a252114ed0adf3601ca692
Size

200KB
MD5

da6e79d2e3667446d64a9c0c8e6e4434
SHA1

1d59b41ed80a3b65cc0d2fc200550516b5f61a25
SHA256

aa7a4bb5e48e4d05d48a1db07876f530d33f7a8162a252114ed0adf3601ca692
SHA512

5a04792d00e037e6ab7bdb67c8de175fdd9efc43ad24dba64d79212dd2edb75049d2720bc39144f0c4aec1684cbdf6d345711c2c634492c1230494269d258497
SSDEEP

6144:7ws2t2HNagZUsD/VANCiXhWIxv5B1OP87/:UptETy0sRBy8r

Score

N/A

Malware Config

Signatures

Files

aa7a4bb5e48e4d05d48a1db07876f530d33f7a8162a252114ed0adf3601ca692
.exe windows x86

c4de6c5f7cabc5e3fde05921ee73d785

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
PeekNamedPipe
GetExitCodeProcess
GetEnvironmentVariableW
GetVersionExW
CreatePipe
SetUnhandledExceptionFilter
SetErrorMode
DuplicateHandle
OpenMutexA
CreateMutexW
CreateEventA
GetCurrentProcess
SystemTimeToFileTime
GetLocalTime
WriteConsoleA
VirtualFree
VirtualAlloc
LCMapStringA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
GetModuleFileNameA
RtlUnwind
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapCreate
HeapDestroy
LCMapStringW
SetFilePointer
WriteFile
CloseHandle
GetLastError
GetVersion
GetStartupInfoW
GetModuleHandleA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc

shlwapi

StrCmpW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance

ws2_32

setsockopt
shutdown
socket
htons
getsockname
gethostname
WSAConnect
WSACreateEvent
WSASocketW
sendto
gethostbyname

version

GetFileVersionInfoA
VerQueryValueA

wininet

InternetReadFile
InternetWriteFile
HttpQueryInfoW
InternetQueryDataAvailable
HttpSendRequestW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
InternetSetOptionExW
InternetGetLastResponseInfoW

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4de6c5f7cabc5e3fde05921ee73d785

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ole32

ws2_32

version

wininet

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 8KB - Virtual size: 90KB

.rsrc Size: 4KB - Virtual size: 904B

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 8KB - Virtual size: 90KB

.rsrc
Size: 4KB - Virtual size: 904B