f5666bf45fa5baef0fcce10c2d1fb5dc20615a4ae07bbdbc4933eb2f50b7e1cf[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

f5666bf45fa5baef0fcce10c2d1fb5dc20615a4ae07bbdbc4933eb2f50b7e1cf.7z
Size

446KB
MD5

a7e07f6b6562d0dd6a272da2f746bf9a
SHA1

d414446d47157908422f2d7d9b0049293be506de
SHA256

00bb66f6b3901efbcbc3698aba74f6620e51f6e351d90264d003437ef084b9e0
SHA512

218111063367aa268b25b8c6279d2c7ca51ee1b3ddd498058f38e815f42c3a7008275bbd7a15c2ecf296c246673fc3984ea454a2f65c97755a6a60c27f594479
SSDEEP

12288:4Eug+M2qBbVygYrci6VKaL+F/h4LvOrXIr2KDaM4Ezy13:4ggqBg6VzKF/cvOrIrknx

Score

N/A

Malware Config

Signatures

Files

f5666bf45fa5baef0fcce10c2d1fb5dc20615a4ae07bbdbc4933eb2f50b7e1cf.7z
.7z

Password: infected
f5666bf45fa5baef0fcce10c2d1fb5dc20615a4ae07bbdbc4933eb2f50b7e1cf
.dll windows x86

Password: infected

c28a9b076cff874eec141794f0985893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
CloseHandle
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLogicalProcessorInformation

ws2_32

setsockopt

Exports

Exports

MTDeleteAllFeatures
MTDeleteSingleFeature
MTGetLastError
MTNotification
MTRecognition
MTSetSrvPort
_MTDeleteAllFeatures_stdcall@0
_MTDeleteSingleFeature_stdcall@4
_MTGetLastError_stdcall@8
_MTNotification_stdcall@12
_MTRecognition_stdcall@12
_MTSetSrvPort_stdcall@4

Sections

.text
Size: - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

c28a9b076cff874eec141794f0985893

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

Exports

Exports

Sections

.text Size: - Virtual size: 329KB

.rdata Size: - Virtual size: 101KB

.data Size: - Virtual size: 15KB

.text Size: - Virtual size: 350KB

.data Size: - Virtual size: 24KB

Size: 30KB - Virtual size: 29KB

.reloc Size: 512B - Virtual size: 328B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 329KB

.rdata
Size: - Virtual size: 101KB

.data
Size: - Virtual size: 15KB

.text
Size: - Virtual size: 350KB

.data
Size: - Virtual size: 24KB

.reloc
Size: 512B - Virtual size: 328B

.rsrc
Size: 1KB - Virtual size: 1KB