75be03786c94729759f4e832f64be5bf63f0bf186dc30bd9354fc62ec5f3739a

Sharing

Copy URL Twitter E-mail

General

Target

75be03786c94729759f4e832f64be5bf63f0bf186dc30bd9354fc62ec5f3739a
Size

225KB
MD5

71269a172fc6d0a693913bd25b02da46
SHA1

5cda24373bf3489ded98655a3de1055023dce35d
SHA256

75be03786c94729759f4e832f64be5bf63f0bf186dc30bd9354fc62ec5f3739a
SHA512

87cd46a2071a3e44658988077a486dc491f5268bc59a18f43415482d30b2b906ca8b030d0c08010c5f05f2fd1ec862a1bfcd3c7426ee5fb9004725aa9a3dcd8c
SSDEEP

3072:Itl2bON6tb4ZCjtI46V+yfVeAwtnsVV22uAg0Fuj05Zfm/BMsP020D:ItlChbvjt16VZHwpZAOAAxM20D

Score

N/A

Malware Config

Signatures

Files

75be03786c94729759f4e832f64be5bf63f0bf186dc30bd9354fc62ec5f3739a
.exe windows x86

042ba8202bd1b0fa3f1d02c44dd14556

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
closesocket
gethostbyname
WSAStartup
send
socket
connect
htons

kernel32

GetProcAddress
CreateFileW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
GetOEMCP
RtlUnwind
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
WriteConsoleW
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
CloseHandle
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapAlloc
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

042ba8202bd1b0fa3f1d02c44dd14556

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 51KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 51KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 7KB - Virtual size: 6KB