deeb6a9e363ce466cbdea3930b427ba4cdb4bd3c4d8f0c8dad5c0f7d6cac0076

Sharing

Copy URL Twitter E-mail

General

Target

deeb6a9e363ce466cbdea3930b427ba4cdb4bd3c4d8f0c8dad5c0f7d6cac0076
Size

272KB
MD5

02afa6616bda2fcbb8e28e29ffaa963f
SHA1

8921bc6b701985210c3624839794fb71fac0657d
SHA256

deeb6a9e363ce466cbdea3930b427ba4cdb4bd3c4d8f0c8dad5c0f7d6cac0076
SHA512

0b69fea7e665223505c6c4c3152d133e08acd7a01d014d9f4541dd0dbb1648aae10d36ac005d463ffc1254172bbd8efa454db5a7ce8f078a5be85cd8cc348c8c
SSDEEP

6144:KJh+NKF7EEZiY20I+2in58xrbLywoN4Z:mhv7EEZinnin58xrbLywoN

Score

N/A

Malware Config

Signatures

Files

deeb6a9e363ce466cbdea3930b427ba4cdb4bd3c4d8f0c8dad5c0f7d6cac0076
.exe windows x86

9336d590162998c98c979636ea84e161

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetStdHandle
AllocConsole
ReadConsoleA
ReadFile
SetHandleInformation
CreatePipe
HeapFree
HeapAlloc
GetProcessHeap
GetLastError
OpenProcess
GetCurrentProcessId
GetDriveTypeA
GetModuleFileNameA
GetCurrentProcess
FindClose
FindNextFileA
FindFirstFileA
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
WaitForSingleObject
CreateSemaphoreA
InitializeCriticalSection
HeapDestroy
GetStartupInfoA
CreateProcessA
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount
GetLogicalDriveStringsA
Sleep
GetStringTypeExA
GetSystemInfo
VirtualQuery
VirtualProtect
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
CreateFileA
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
GetFileType
IsValidCodePage
IsValidLocale
IsBadWritePtr
VirtualAlloc
VirtualFree
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
GetModuleHandleA
HeapSize
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapCreate

user32

LoadStringA

advapi32

DuplicateToken
MapGenericMask
AccessCheck
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetFileSecurityA

ws2_32

sendto
recvfrom
gethostname
gethostbyname
htons
ioctlsocket
connect
select
send
setsockopt
recv
closesocket
inet_ntoa
WSAStartup
inet_addr
WSACleanup
socket

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
InternetQueryOptionA

mpr

WNetAddConnection2A

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9336d590162998c98c979636ea84e161

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

mpr

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 192B

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 192B