9fa0bf97d4755dccc7c994f4541059031f8a70b8b7bb87068a80e6ad9388ef02

General

Target

9fa0bf97d4755dccc7c994f4541059031f8a70b8b7bb87068a80e6ad9388ef02
Size

15KB
MD5

c7daf5e9918897d91cd3b755102d6308
SHA1

74f38416cb430b1b370c01ad1a50228fccd10643
SHA256

9fa0bf97d4755dccc7c994f4541059031f8a70b8b7bb87068a80e6ad9388ef02
SHA512

7890373885e8b288c20e18c9d858681a90ad900036d6989e49a53993f0d71be762e35bd63833330d5c1725e71cbcfd7b579660e8a09ddf82ce6dcdeb1445bc3d
SSDEEP

192:2VPX3uh0HPjaFXug4lf02ThBtESfMSLhWlhmJrApm2lNDdFg/WEsUp:2ZuhPFXJBbSfMYhhChfDdMWEs

Score

N/A

Malware Config

Signatures

Files

9fa0bf97d4755dccc7c994f4541059031f8a70b8b7bb87068a80e6ad9388ef02
.exe windows x86

aad930146294f09a5a62c8bd2f3dc103

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
inet_addr
htons
setsockopt
recv
socket
closesocket
gethostbyname
send
WSAStartup

userenv

GetAllUsersProfileDirectoryA

kernel32

CreateThread
ResumeThread
ExitProcess
GetThreadContext
CreateFileA
SetThreadContext
FreeLibrary
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
VirtualFree
WriteFile
Sleep
CreateProcessA
TerminateProcess
GetEnvironmentVariableA
IsBadStringPtrA
GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
CopyFileA
VirtualAllocEx
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
ReleaseMutex
CloseHandle
WriteProcessMemory

user32

wsprintfA

advapi32

CreateWellKnownSid
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
EqualSid
RegSetValueExA
GetTokenInformation
OpenProcessToken

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aad930146294f09a5a62c8bd2f3dc103

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

userenv

kernel32

user32

advapi32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 912B

.reloc Size: 512B - Virtual size: 504B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 504B