a173b8e32ef27e75d537b6e733e0c7e013693cb5906ebd1ca97301fc65bb0fc6

Sharing

Copy URL Twitter E-mail

General

Target

a173b8e32ef27e75d537b6e733e0c7e013693cb5906ebd1ca97301fc65bb0fc6
Size

88KB
MD5

2affe3671038031ad90201f5487ed9e0
SHA1

4d4690779e16a796f3c6484621010e887459e62a
SHA256

a173b8e32ef27e75d537b6e733e0c7e013693cb5906ebd1ca97301fc65bb0fc6
SHA512

d6560045ee6fa6fe1e9d1b44ac3a84704ad903a2ad1d4962247ea523b32b30f8e1643126b49c6b7cb405d592c46c6c8ddbae14c2c38d3cf79b7a31a646ef73ac
SSDEEP

1536:Pmm5nkpZFA/EZ6COeHoArrLaJHddRV6DjX++dLAjtabv9JqK40BFU:Pmm5nSZFA/yN3rPaJRV6nX++KjtaQ0

Score

N/A

Malware Config

Signatures

Files

a173b8e32ef27e75d537b6e733e0c7e013693cb5906ebd1ca97301fc65bb0fc6
.exe windows x86

fe053a65562e6e6cf7ccdb32e02f0fb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dnssd

DNSServiceEnumerateDomains
DNSServiceBrowse
DNSServiceResolve
DNSServiceQueryRecord
DNSServiceRefDeallocate
DNSServiceRegister
DNSServiceCreateConnection
DNSServiceRegisterRecord
DNSServiceRefSockFD
DNSServiceProcessResult
DNSServiceUpdateRecord
DNSServiceAddRecord
DNSServiceRemoveRecord

ws2_32

select
__WSAFDIsSet
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr

kernel32

HeapCreate
CompareStringW
CompareStringA
CloseHandle
HeapSize
SetStdHandle
GetSystemInfo
VirtualProtect
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
SetFilePointer
VirtualQuery
InterlockedExchange
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetLocalTime
HeapAlloc
HeapFree
ExitProcess
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCommandLineA
GetVersionExA
HeapDestroy
SetEnvironmentVariableA
VirtualFree
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleFileNameA
WideCharToMultiByte
GetTimeZoneInformation
GetStringTypeA
MultiByteToWideChar
GetLastError
GetStringTypeW
WriteFile
FlushFileBuffers

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fvuryqm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe053a65562e6e6cf7ccdb32e02f0fb4

Headers

File Characteristics

Imports

dnssd

ws2_32

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 32KB - Virtual size: 32KB

fvuryqm Size: - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 32KB - Virtual size: 32KB

fvuryqm
Size: - Virtual size: 4KB