aa4942da9a41c2c7ce12bc3855eb2350[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

aa4942da9a41c2c7ce12bc3855eb2350.exe
Size

483KB
MD5

aa4942da9a41c2c7ce12bc3855eb2350
SHA1

07ddcf865989c7f5a07a9835f59d222e5a438edd
SHA256

c5fcb78f3d8f37ad58277089aa4ad3f4e6f0388ad8ee3c8e19065bab1b7f38e7
SHA512

abb6c4b4ccd210623e7eaa3638e142e91b58e22cc09719a6f233402ed451e68af7fe11ef6bb7fd7ff293b68f7042d147f4db388a9a7506815f6640c7e78beab3
SSDEEP

12288:2CcmFM0luMoL4Ip5iYVCZWOERUB3HDrOtW:27m20M4IpAqCZZE6B3POc

Score

1^/10

Malware Config

Signatures

Files

aa4942da9a41c2c7ce12bc3855eb2350.exe
.exe windows x86

7dc8a7abc496d99feefc72c0a0d7748c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
_onexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
toupper
rand
srand
putchar
getc
fopen
fclose
__dllonexit
_kbhit

kernel32

EnumResourceTypesA
GetConsoleCP
LockFileEx
GetFileAttributesExW
GetCommProperties
GetMailslotInfo
GetStartupInfoA
GetModuleHandleA
SetConsoleCursorPosition
SleepEx
GetStdHandle
BeginUpdateResourceW

winmm

waveOutBreakLoop
waveInReset
timeSetEvent

msacm32

acmGetVersion
acmStreamReset
acmFilterDetailsW
acmStreamClose
acmFormatTagDetailsA
acmDriverRemove

ole32

GetClassFile
OleTranslateAccelerator
HBRUSH_UserSize
WriteClassStg

rtm

MgmGetFirstMfe
MgmReleaseInterfaceOwnership
RtmRegisterClient
RtmBlockSetRouteEnable
RtmDeregisterClient
RtmGetRouteAge
RtmIsRoute

msi

ord16
ord50
ord171
ord129
ord55
ord28
ord73

loadperf

UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA

mswsock

SetServiceA
rexec
GetAcceptExSockaddrs
TransmitFile
GetNameByTypeA
GetTypeByNameW
AcceptEx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc8a7abc496d99feefc72c0a0d7748c

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

winmm

msacm32

ole32

rtm

msi

loadperf

mswsock

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 1024B - Virtual size: 792B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 1024B - Virtual size: 792B