bf9a2aa96e74c45be018773d393a48805d5ad4377e7638caa66c4d470c256022

General

Target

bf9a2aa96e74c45be018773d393a48805d5ad4377e7638caa66c4d470c256022
Size

500KB
MD5

16015de69c55b9feb1098c3e792da261
SHA1

6009b9e47987a8a6f9a94fc77a09300bbf5dfed8
SHA256

bf9a2aa96e74c45be018773d393a48805d5ad4377e7638caa66c4d470c256022
SHA512

f54da6eaafb65023dfa04234157dfb2e3062788ba41f8ad04933a17186523f0da766d8561c114c37369717dff266a1475ad9274c4a94806394123526c4f04298
SSDEEP

6144:YOVXK4E2j41mIXokTf6EiS0oYYK8IpUTuAqKKyKyVwJucGqIxHIfH97OdA1st7Bm:7M4S4IXoUkaq1B9GkN4ASBXrNlKf

Score

N/A

Malware Config

Signatures

Files

bf9a2aa96e74c45be018773d393a48805d5ad4377e7638caa66c4d470c256022
.exe windows x86

875021fe4cad6a97a8fd3813b56b60b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GlobalFree
GlobalAlloc
GetLocaleInfoA
GlobalUnlock
WriteConsoleW
VirtualProtect
CloseHandle
GetLastError
OpenMutexA
GetHandleInformation
SetHandleInformation
CreatePipe
CompareStringW
CompareStringA
SetStdHandle
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
SetEnvironmentVariableA

ws2_32

WSAStartup
gethostbyname
sendto
setsockopt
shutdown
socket
htons
getsockname
getpeername
WSACloseEvent
WSAConnect
WSAAddressToStringA
WSACreateEvent

Sections

.text
Size: 324KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

875021fe4cad6a97a8fd3813b56b60b4

Headers

File Characteristics

Imports

kernel32

ws2_32

Sections

.text Size: 324KB - Virtual size: 321KB

.rdata Size: 164KB - Virtual size: 163KB

.data Size: 268KB - Virtual size: 1.2MB

.tls Size: 4KB - Virtual size: 84B

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 324KB - Virtual size: 321KB

.rdata
Size: 164KB - Virtual size: 163KB

.data
Size: 268KB - Virtual size: 1.2MB

.tls
Size: 4KB - Virtual size: 84B

.rsrc
Size: 8KB - Virtual size: 7KB