eff2eeca155dd2921e620dffb6188a38ce8c224359a93b97b146a20d0b9efd83

General

Target

eff2eeca155dd2921e620dffb6188a38ce8c224359a93b97b146a20d0b9efd83
Size

16KB
MD5

2979d8c27c307071fad8fced3d2dcea0
SHA1

ff0a4763345174e6d336660da9f01431f8afc148
SHA256

eff2eeca155dd2921e620dffb6188a38ce8c224359a93b97b146a20d0b9efd83
SHA512

110530bb28069fbc8854e235f3163327825653f732b8e3fa601021470a9b8eff74337c0f35b0b58af7b028d3aa4e8c0347390e09d2e59f110312587181dc410b
SSDEEP

192:yVXI7uRwDztPT29H3KOl3PgeIX7SL05Nwbsi7rx+9lxm67A12laDdFg/fh:youRs29H6QcSL0497cIqYDdMf

Score

N/A

Malware Config

Signatures

Files

eff2eeca155dd2921e620dffb6188a38ce8c224359a93b97b146a20d0b9efd83
.exe windows x86

d6621aa8cfde8326406f8618704b54fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
inet_addr
htons
setsockopt
recv
socket
closesocket
gethostbyname
send
WSAStartup

userenv

GetAllUsersProfileDirectoryA

kernel32

CreateThread
ResumeThread
ExitProcess
GetThreadContext
CreateFileA
SetThreadContext
FreeLibrary
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
WaitForSingleObject
VirtualFree
WriteFile
Sleep
CreateProcessA
TerminateProcess
GetEnvironmentVariableA
IsBadStringPtrA
GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
CopyFileA
VirtualAllocEx
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
ReleaseMutex
CloseHandle
WriteProcessMemory

user32

wsprintfA

advapi32

CreateWellKnownSid
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
EqualSid
RegSetValueExA
GetTokenInformation
OpenProcessToken

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d6621aa8cfde8326406f8618704b54fb

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

userenv

kernel32

user32

advapi32

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 912B

.reloc Size: 1024B - Virtual size: 29KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 912B

.reloc
Size: 1024B - Virtual size: 29KB