6d2f5675630d0dae65a796ac624fb90f42f35fbe5dec2ec8f4adce5ebfaabf75_unpacked

General

Target

6d2f5675630d0dae65a796ac624fb90f42f35fbe5dec2ec8f4adce5ebfaabf75_unpacked
Size

16KB
MD5

b34df685f6b74dbf9a19c71b2764eb8b
SHA1

a404f443a93b676c158a1b7351dfd21f53239828
SHA256

208c50ba38c2550007edc49dba411f495d443badfa236f94721d9e6596518447
SHA512

56d2629771b103460e1e1e063f618e68cc25fb1cb83949f5c8a9462ab2f294e4c0cd9a6cc15e0f377d8f2082b437fe6f953e4d16bbed9f30c2f898e43548e10f
SSDEEP

192:BAuNZ88DsBDsqsfmMgMEEY/tfqXyonnWwFGdHJJ0xW+ZgY7uUjow28G:BRuPBDsqqgr1ftofFWJJojzrJG

Score

N/A

Malware Config

Signatures

Files

6d2f5675630d0dae65a796ac624fb90f42f35fbe5dec2ec8f4adce5ebfaabf75_unpacked
.dll windows x86

dc07165bf16b978743ee62020a164b10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateThread
lstrlenW
Sleep
SetErrorMode
HeapAlloc
GetProcessHeap
VirtualFreeEx
VirtualAllocEx
GetCurrentProcess
lstrcpyW
CloseHandle
GetLocalTime
lstrcatW
GetCurrentProcessId
GetComputerNameA
GetTickCount
WideCharToMultiByte
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
lstrlenA
HeapFree

msvcrt

swprintf
memset
rand
srand
_wtoi
wcsstr
mbstowcs
wcstombs
strcat
strcpy
free
strtoul
calloc
strlen
strcmp
strncpy
strchr
sprintf
memcpy

advapi32

GetUserNameA

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpen
WinHttpReadData
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpTimeFromSystemTime
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser

ws2_32

WSAAddressToStringA
inet_ntoa
WSASetLastError
WSAStartup
htonl
getservbyname
htons
inet_addr
WSAGetLastError
gethostbyname
gethostbyaddr
ntohs
getservbyport

Exports

Exports

PrintF

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc07165bf16b978743ee62020a164b10

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

winhttp

ws2_32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 658B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 658B