cmd_exploit[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

cmd_exploit.exe
Size

4.9MB
MD5

393e4c84bf2a3637bd47372d52d73e6a
SHA1

229d308dcaf33779ea3e873b5d9de52f88c7fc4d
SHA256

7febd60558b3b438bbb93c78193e38f139a9b92cd2ef1acbfe093d14dee29f45
SHA512

b3767789dc84c40082bd636df16c42c43ae59476c30e08e3b56b8e385493d781ff7c727955f705cb079a20896b1671eebe42f7831fba67c98e914215e79720c5
SSDEEP

49152:ZfKNWBEh5HFxWDzj634yBCs+CrgYt3PsinU+MHBMqVBQPEKE0EdY3aDmYzlrP0v2:XBxa3C+XEVStYJmX

Score

1^/10

Malware Config

Signatures

Files

cmd_exploit.exe
.exe windows x64

6dccb47408c5c64cbf44abd4aafc1a8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetModuleFileNameW
WaitForSingleObject
OutputDebugStringA
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
GetConsoleCP
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
HeapReAlloc
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateDirectoryW
GetStringTypeW
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
CreateFileW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
DeleteFileW
ReadFile
EncodePointer
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
RtlUnwindEx
ResumeThread
SetThreadPriority
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ExpandEnvironmentStringsA
FormatMessageA
Sleep
GetVersionExA
lstrcmpiA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
GetSystemInfo
GetTickCount
SetThreadAffinityMask
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatus
WinExec
MultiByteToWideChar
GetFullPathNameW
SetErrorMode
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetLastError
SleepEx
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
WriteFile
GetTempPathA
CloseHandle
GlobalFree
LocalAlloc
MulDiv

user32

LoadIconA
MessageBoxA
SendMessageA
RegisterClassA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplaySettingsA
ChangeDisplaySettingsA
LoadImageA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
SendMessageTimeoutW
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
GetWindowPlacement
GetActiveWindow
GetFocus
TranslateMessage
ToAscii
MapVirtualKeyA
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
UpdateWindow
SetActiveWindow
SetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
AdjustWindowRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
FillRect
SetWindowLongPtrA
LoadCursorA
GetKeyboardState

advapi32

RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

shell32

CommandLineToArgvW
ShellExecuteExW

shlwapi

PathRelativePathToA

opengl32

glDisableClientState
glDrawArrays
glDrawElements
glEnable
glEnableClientState
glEnd
glFlush
glFogf
glFogfv
glFogi
glFrontFace
glGetBooleanv
glGetError
glGetFloatv
glGetString
glHint
glLightModelfv
glLightModeli
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
glAlphaFunc
glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glClearDepth
glClipPlane
glColor4ub
glColorMask
glColorPointer
glCullFace
glDepthFunc
glDepthMask
glLightf
glTexSubImage2D
glTexImage2D
glGetTexImage
glGenTextures
glDeleteTextures
glCopyTexSubImage2D
glGetIntegerv
glViewport
glVertexPointer
glVertex3f
glVertex2i
glVertex2f
glTranslatef
glTexParameteri
glTexParameterf
glTexGeni
glTexEnvi
glTexEnvf
glTexCoordPointer
glTexCoord2f
glStencilOp
glStencilMask
glStencilFunc
glShadeModel
glScissor
glRectf
glReadPixels
glReadBuffer
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonOffset
glPolygonMode
glPointSize
glPixelStorei
glNormalPointer
glMatrixMode
glMaterialfv
glMaterialf
glLoadMatrixf
glLoadIdentity
glLineWidth
glLightfv
glDisable

wsock32

WSAGetLastError
recv
send
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
WSACleanup
socket
__WSAFDIsSet
select
WSASetLastError
recvfrom
sendto
accept
listen
inet_ntoa
gethostname
closesocket
setsockopt
WSAStartup

ws2_32

freeaddrinfo
getaddrinfo

winmm

waveOutPrepareHeader
waveOutWrite
waveOutOpen
timeEndPeriod
timeBeginPeriod
waveOutClose
waveOutUnprepareHeader
waveOutReset

gdi32

GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
TextOutW
GetObjectA
SetTextColor
SetWindowExtEx
SetViewportExtEx
StretchDIBits
SetMapMode
SetPixelFormat
SelectObject
SetPixel
SetBkMode
GetStockObject
Rectangle
GetTextExtentPoint32W
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
SwapBuffers

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dccb47408c5c64cbf44abd4aafc1a8d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

opengl32

wsock32

ws2_32

winmm

gdi32

ole32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 173KB - Virtual size: 183KB

.pdata Size: 153KB - Virtual size: 153KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 43KB - Virtual size: 42KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 173KB - Virtual size: 183KB

.pdata
Size: 153KB - Virtual size: 153KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 43KB - Virtual size: 42KB