471d72a8e695f18b475d00ac84f0de6e67730dd6fdd9b141969ce44ca40a9b7b

General

Target

471d72a8e695f18b475d00ac84f0de6e67730dd6fdd9b141969ce44ca40a9b7b
Size

34KB
MD5

091038128f21035022ef6067ea130219
SHA1

b8dd2e7920350ff45801af0968804ac6bbde67c6
SHA256

471d72a8e695f18b475d00ac84f0de6e67730dd6fdd9b141969ce44ca40a9b7b
SHA512

b7e14529ad04001c23530581720f9816457bf02a7e69ba637bea10dff50989f42c9913b6ba2c789c12ac7177b40128d93833758752658434be0e6556b770fc70
SSDEEP

768:Yjd9iYcq9yZL4iiZdHfk0LcoF3QTXq8P6r0l30zzd4x0Cxb:K9JLmLb2d/v7QT7l3QdcT

Score

N/A

Malware Config

Signatures

Files

471d72a8e695f18b475d00ac84f0de6e67730dd6fdd9b141969ce44ca40a9b7b
.exe windows x86

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup

psapi

EnumProcessModules
GetModuleFileNameExA

kernel32

Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc

user32

ShowWindow
wsprintfA
IsCharAlphaNumericA

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit

oleaut32

GetErrorInfo

Sections

.bss
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

Imports

ws2_32

psapi

kernel32

user32

msvcrt

oleaut32

Sections

.bss Size: - Virtual size: 225KB

.data Size: 26KB - Virtual size: 25KB

.bss
Size: - Virtual size: 225KB

.data
Size: 26KB - Virtual size: 25KB