71eeb807489f6cd8b5d685021e518111e472e3cc8b8e513836e7f308b895dee2

Sharing

Copy URL Twitter E-mail

General

Target

71eeb807489f6cd8b5d685021e518111e472e3cc8b8e513836e7f308b895dee2
Size

177KB
MD5

4040a9df74448e0c0669c0a953518f9a
SHA1

747ec4a073c53ef069e6fdf75c00618710e06b1a
SHA256

71eeb807489f6cd8b5d685021e518111e472e3cc8b8e513836e7f308b895dee2
SHA512

21d187ca0567645d5f2bf0337a7bb9ea14853514afa5ed901390480e89a8f7c4a99eb3545af2c3d3f2d781b96b37c9f590bd8fbb663a578680ac95e55ea22b1c
SSDEEP

3072:z9Wtx0Tez0+REULT2urIlhEc7ltcv2+ojiPgUEPToU:zktxHOuT2u0qc70v2+ou

Score

N/A

Malware Config

Signatures

Files

71eeb807489f6cd8b5d685021e518111e472e3cc8b8e513836e7f308b895dee2
.exe windows x86

dd5d0539603189ef570158bb7b9ac5bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetShortPathNameA
GetEnvironmentVariableA
RemoveDirectoryA
WaitForSingleObject
GetCurrentProcess
LoadLibraryA
HeapValidate
HeapCompact
HeapCreate
HeapFree
HeapAlloc
RemoveDirectoryW
FindFirstFileW
FindNextFileW
TlsSetValue
TlsAlloc
GetProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
SetFilePointer
ReadFile
SetEndOfFile
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
CreateFileA
CloseHandle
GetLastError
WriteFile
RtlUnwind
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
FlushFileBuffers
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA

user32

MapWindowPoints
GetScrollRange
FrameRect
ClientToScreen
SetDlgItemInt
SetForegroundWindow
IsClipboardFormatAvailable
CheckRadioButton
OffsetRect
EndDialog
CloseClipboard
SendDlgItemMessageA
SetClipboardData
SetFocus
RegisterClassExA
GetFocus
TrackPopupMenu
AppendMenuA
GetClassInfoExA
CallWindowProcW
GetWindowLongA
GetCursorPos
InvalidateRect
PostMessageW
DestroyWindow
SendMessageA
ValidateRect
DestroyMenu
BeginPaint
EmptyClipboard
GetDlgItemInt

ws2_32

getservbyport
getprotobynumber
getpeername
getsockname
htons
socket
shutdown
WSAStartup
WSACleanup
gethostbyname
sendto
setsockopt
getservbyname

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd5d0539603189ef570158bb7b9ac5bc

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 55KB - Virtual size: 268KB

.rsrc Size: 1024B - Virtual size: 800B

.reloc Size: 27KB - Virtual size: 55KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 55KB - Virtual size: 268KB

.rsrc
Size: 1024B - Virtual size: 800B

.reloc
Size: 27KB - Virtual size: 55KB