c970287c39a1886d7d19ad373bf66dac996593aa9f8baed654033960444e06d7

General

Target

c970287c39a1886d7d19ad373bf66dac996593aa9f8baed654033960444e06d7
Size

248KB
MD5

07b67851f47ff3f1ce40cfdd7d11eb0d
SHA1

50632de86efd3987a02ce25d12f045b42319b7e8
SHA256

c970287c39a1886d7d19ad373bf66dac996593aa9f8baed654033960444e06d7
SHA512

af0f8ff5b7231b7859c5c927400f6c5acafb7a35658ab1698c7329b70c084b0ed6a17dda1c9c9af7902d571fd41011d90a22780fcbe5ebafc335ea9e354b6962
SSDEEP

768:7bVoESHkA6w/6Sgub7fHyS3YwEFa4uTwSBBQARQk1JvB:XV3SH5Ea4uTZBBQARp

Score

N/A

Malware Config

Signatures

Files

c970287c39a1886d7d19ad373bf66dac996593aa9f8baed654033960444e06d7
.dll windows x86

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
_snprintf
_strupr
RtlZeroMemory
atoi
memcmp
memcpy
strlen
strstr

ws2_32

gethostbyname
connect
closesocket
socket
send
gethostname
recv
inet_addr
htons

kernel32

lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
MoveFileExA
MapViewOfFile
GetTempPathA
GetTempFileNameA
GetStartupInfoA
GetLastError
GetFileSize
GetExitCodeThread
DeleteFileA
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
CreateProcessA
ExitProcess
IsBadReadPtr
WritePrivateProfileStringA
CreateFileA
CreateFileMappingA

user32

SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 28KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 204KB - Virtual size: 202KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 204KB - Virtual size: 202KB

.reloc
Size: 4KB - Virtual size: 1KB