0afe6f9bd44e6e4fadec2abe436726f7dd752a55b00a569ce0d0f1bd4ecb9107

Sharing

Copy URL Twitter E-mail

General

Target

0afe6f9bd44e6e4fadec2abe436726f7dd752a55b00a569ce0d0f1bd4ecb9107
Size

72KB
MD5

0d2d93a5df1022c22d8fcc6e0bdab200
SHA1

3c9e3f6be7c0ed67b5b1b6dfa19e829a9bb557fd
SHA256

0afe6f9bd44e6e4fadec2abe436726f7dd752a55b00a569ce0d0f1bd4ecb9107
SHA512

f1cb9c084d7f134a9a99be8bcdc2ca030b739ed856de0faca88f1af541da3ff5b65d2b80d03216c88919771775274a8d6eb87edf3707a2ae9a045cbcde85e6c4
SSDEEP

768:cMw2jMV5hain++tLR5MLXs5TGf7Nl7mSk0MGVuH8Zvr39QEHodFEz5zQa+1:vw+05ME1lUf7Nl7Nk6Vnlayoq5zA

Score

N/A

Malware Config

Signatures

Files

0afe6f9bd44e6e4fadec2abe436726f7dd752a55b00a569ce0d0f1bd4ecb9107
.exe windows x86

45e4a10dc0becd4d3a095305f08b47fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
SetFileAttributesA
CreateProcessA
LoadLibraryA
CreateMutexA
ReleaseMutex
CloseHandle
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetLocalTime
FreeLibrary
SetEndOfFile
CreateDirectoryA
ReadFile
CreateFileA
FlushFileBuffers
DeleteFileA
GetSystemTimeAsFileTime
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
HeapAlloc
RaiseException
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

wsock32

connect
WSAStartup
htons
WSACleanup
recv
socket
closesocket
gethostbyname
send

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45e4a10dc0becd4d3a095305f08b47fb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wsock32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 5KB