ef86ec4388dbd7fdc93951cfe38f70df48c7b706e5769efb845c04eed6ef267f

General

Target

ef86ec4388dbd7fdc93951cfe38f70df48c7b706e5769efb845c04eed6ef267f
Size

87KB
MD5

a2553d93acb532cb959cf0b881037a10
SHA1

f053cae00e0e0fd50dbf563044d6cc1a57a6cce2
SHA256

ef86ec4388dbd7fdc93951cfe38f70df48c7b706e5769efb845c04eed6ef267f
SHA512

83a8b3d6f09e5b2821ae82ae7f47381b01f62ef3b24bf2e881fcb1090799add7ed676b57897e90727ba237c85a5f69618993cfe3de170d6c63a03de7aee77d95
SSDEEP

1536:E+lN5bzZ9fIQ4UA170tta5HOFeNC5AmeY6+eo5LXdPFjV+SI:Nhzmyta5HUeNLqfpdPFjc

Score

N/A

Malware Config

Signatures

Files

ef86ec4388dbd7fdc93951cfe38f70df48c7b706e5769efb845c04eed6ef267f
.exe windows x86

7f4b4d0f8438df86be751dcd98624637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
FreeLibrary
SetEvent
WaitForSingleObject
CloseHandle
CreateThread
CreateEventW
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

msvcp71

?_Nomemory@std@@YAXXZ

iphlpapi

GetAdaptersInfo

ws2_32

WSACleanup
connect
recv
listen
WSAStartup
send
socket
setsockopt
recvfrom
WSCEnumProtocols
WSCGetProviderPath
accept
closesocket
bind
htons
inet_addr
sendto

msvcr71

_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
??_V@YAXPAX@Z
rand
srand
time
strncmp
malloc
_callnewh
__security_error_handler
_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.krdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f4b4d0f8438df86be751dcd98624637

Headers

File Characteristics

Imports

kernel32

msvcp71

iphlpapi

ws2_32

msvcr71

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 176B

.rsrc Size: 1024B - Virtual size: 984B

.krdata Size: 72KB - Virtual size: 72KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 176B

.rsrc
Size: 1024B - Virtual size: 984B

.krdata
Size: 72KB - Virtual size: 72KB