12a014659f8e01176855a145fe085206316017b5ca7d2f498d7cd277aa6e1f70

General

Target

12a014659f8e01176855a145fe085206316017b5ca7d2f498d7cd277aa6e1f70
Size

48KB
MD5

63a866e115b2900e34e7d9dc6388764b
SHA1

556db51ef8a17a129a0a0c144226bc4c03974977
SHA256

12a014659f8e01176855a145fe085206316017b5ca7d2f498d7cd277aa6e1f70
SHA512

67432f5f345d4d10c4cfb4fbe0fa0ebf44a596555527b04cb6caee465f00754b2ddd9cc1b07d7191f2beeedbebfcae02b732b47b768208cdebf718a36aa516ec
SSDEEP

768:tpsLTLQMsj7IU+Ms0LaWeSbTIXMaZ0M+Xw4FrQmFntL:tps/wCSw8W0lF91tL

Score

N/A

Malware Config

Signatures

Files

12a014659f8e01176855a145fe085206316017b5ca7d2f498d7cd277aa6e1f70
.exe windows x86

599334b7d65d30762e0610d9458c5624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WinExec
GetTempPathA
CloseHandle
WaitForSingleObject
Process32Next
lstrcmpiA
Process32First
GetCurrentProcessId
GetCurrentProcess
GetWindowsDirectoryA
ExitProcess
CopyFileA
DeleteFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetTickCount
LoadLibraryA
GetProcAddress
Sleep
CreateToolhelp32Snapshot
ExitThread
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
SetFilePointer
GetLastError
GetStringTypeW
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA

ws2_32

__WSAFDIsSet
recv
WSAIoctl
gethostname
inet_ntoa
socket
send
WSAStartup
select
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
gethostbyname
WSASocketA
connect

shlwapi

PathRemoveFileSpecA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

599334b7d65d30762e0610d9458c5624

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

shlwapi

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB