e97b8f3123258df207a61bda17bc3d7617c22797768c73a402575206d282afa5

General

Target

e97b8f3123258df207a61bda17bc3d7617c22797768c73a402575206d282afa5
Size

19KB
MD5

4ac9b71bc85cdd742e31d036f15aaf52
SHA1

119b01a43ed21c467380c06f07545de43b74022e
SHA256

e97b8f3123258df207a61bda17bc3d7617c22797768c73a402575206d282afa5
SHA512

9219d07302b5d00c5b83a431bdc569d296e6c56fe521f6e79004e85af195da43e1b1ae5520fdeb3bf759ee896e125535a73705eb425407c8de54b124845a6ffe
SSDEEP

192:eH4Xkcf4w9AvHA9W/lV1zjuWfvdXvWoQKFToYNAhkzq8fWnWDE8vQWnhIW0:esk4964YV1ptouAhkzq8fWnWDE8vQW2

Score

N/A

Malware Config

Signatures

Files

e97b8f3123258df207a61bda17bc3d7617c22797768c73a402575206d282afa5
.dll windows x86

802cf2ec51b93fbe8da9220f98700a83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1168
ord540
ord2846
ord860
ord537
ord2764
ord6648
ord4129
ord800
ord2915

msvcrt

_adjust_fdiv
malloc
_initterm
free
fopen
__CxxFrameHandler
strncmp
atoi
strstr
_itoa
printf
strchr
strtok
exit
time
srand
rand

kernel32

Sleep
GetCurrentProcessId
CreateProcessA
CreateThread
GetTickCount
HeapAlloc
GetProcessHeap
CloseHandle
TerminateThread
ExitThread
GetSystemDirectoryA
CreateMutexA
GetLastError
ExitProcess
GetPrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
GetVersionExA
GlobalMemoryStatus
GetTempPathA

user32

wsprintfA

advapi32

DeleteService
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
OpenServiceA

urlmon

URLDownloadToFileA

ws2_32

sendto
gethostbyname
inet_addr
htons
setsockopt
WSASocketA
WSAStartup
gethostname
htonl
send
closesocket
connect
socket
inet_ntoa
recv
__WSAFDIsSet
select

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

802cf2ec51b93fbe8da9220f98700a83

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

urlmon

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 242KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 242KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB