5de7550d70aaa78e9403e041a587127742afaadba034dbd93dc54882c53a37db

General

Target

5de7550d70aaa78e9403e041a587127742afaadba034dbd93dc54882c53a37db
Size

120KB
MD5

57a4c1b99f745b87bdb5dfd0820c8b80
SHA1

29029147f718471df88c060b6d8ff830ec989933
SHA256

5de7550d70aaa78e9403e041a587127742afaadba034dbd93dc54882c53a37db
SHA512

8e6136199f969875664a87acbc0815c9eea2a86593a9a51915a1353eea63425b58e3943378e920a3d4d12e8785bbe4ae1bf91c20bf114a0175d11dd8068b41aa
SSDEEP

1536:vkFxpxCbU5jW20fy+C1iYJOzSVxtAxl5uRKdaSDi4VKuskM+izPo58W:YCbcS20K+C1iYJHbw2lui4AQzq68W

Score

N/A

Malware Config

Signatures

Files

5de7550d70aaa78e9403e041a587127742afaadba034dbd93dc54882c53a37db
.exe windows x86

99657691b0e594d2a789996abb8500a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
ReadFile
GetOverlappedResult
WaitForMultipleObjects
WriteFile
CreateEventA
GetLastError
CreateFileA
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
ExitProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetStdHandle
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
CloseHandle
FormatMessageA
LocalFree

ws2_32

gethostbyaddr
ntohs
getservbyport
WSACleanup
recv
recvfrom
send
sendto
closesocket
accept
htons
select
listen
getsockname
getpeername
connect
bind
socket
setsockopt
WSAStartup
getservbyname
htonl
inet_addr
inet_ntoa
__WSAFDIsSet
WSAGetLastError
gethostbyname

ntdll

RtlIpv4StringToAddressA
RtlIpv6StringToAddressA

mswsock

TransmitFile
s_perror

user32

CharToOemBuffA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99657691b0e594d2a789996abb8500a0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

ntdll

mswsock

user32

Sections

.text Size: 37KB - Virtual size: 36KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 37KB - Virtual size: 36KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 80KB - Virtual size: 80KB