cbc9174f5c3dc174a3f3498517aa091615691b2bde95facce9d4230914d31069

General

Target

cbc9174f5c3dc174a3f3498517aa091615691b2bde95facce9d4230914d31069
Size

33KB
MD5

4bbb4da194e6c574a96eba500821fb10
SHA1

52dde0cd40e63d8b9e784d5308f4e06f976495fb
SHA256

cbc9174f5c3dc174a3f3498517aa091615691b2bde95facce9d4230914d31069
SHA512

cab9b7c922d7231f85f6e6cc5607cbad4e273a2f008cb652e89b2a285442414069743b2fdbb19876921de890528764ec7c998e3307b0b5d293947c6eac5703bb
SSDEEP

384:cfdxXCE5lf+kXk2sM+LZ2tWoCIAWOIvvcLZAFyOZ92rL/4LEMrBx1KRLlL17vQCh:AgmVZeZ9I3Mex23QLEMrBv+VpvQCZ5d

Score

N/A

Malware Config

Signatures

Files

cbc9174f5c3dc174a3f3498517aa091615691b2bde95facce9d4230914d31069
.exe windows x86

d54b3e1062c3eacc8eeec7f1cef2a204

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapSetInformation
SetThreadUILanguage
LocalAlloc
LocalFree
GetLastError
SleepEx
GetTickCount
GetCurrentThreadId

msvcrt

__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
memset
memcpy
strtoul
exit
_write

iphlpapi

Icmp6SendEcho2
IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
Icmp6CreateFile
IcmpCreateFile
Icmp6ParseReplies

user32

CharToOemBuffA

ws2_32

WSACleanup
socket
freeaddrinfo
getnameinfo
inet_addr
WSAStartup
getaddrinfo
closesocket
WSAIoctl

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d54b3e1062c3eacc8eeec7f1cef2a204

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

iphlpapi

user32

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 39KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 39KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 21KB - Virtual size: 21KB