40f921388276832d2cf5766b78b34c3ab85b7439b1d28f6c64fbce689a04da37

General

Target

40f921388276832d2cf5766b78b34c3ab85b7439b1d28f6c64fbce689a04da37
Size

342KB
MD5

a2c49f52f7b3fbe1eb356c3a99426560
SHA1

83c7b4ee1cf13359c37adf13045267b8f950855d
SHA256

40f921388276832d2cf5766b78b34c3ab85b7439b1d28f6c64fbce689a04da37
SHA512

b67429542a615c37f9f07f49a1a80be3b1aa4018fb0b0ef450d24a938d1d0529fb4182f9f553cd1b1607e93dcadcbb4741bdd1b158e9c5b80817947dfb26e3e1
SSDEEP

6144:6JCLI4IWVn/nWv9RLEWc0sPd4+aSRrUOXyCVmw6Wh+dFtiDUyzdMhZc6O7RxcUUY:6XyVnQRLEWc0QdlRrVyCr6vaUyqjc6OH

Score

N/A

Malware Config

Signatures

Files

40f921388276832d2cf5766b78b34c3ab85b7439b1d28f6c64fbce689a04da37
.exe windows x86

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup

psapi

EnumProcessModules
GetModuleFileNameExA

kernel32

Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc

user32

ShowWindow
wsprintfA
IsCharAlphaNumericA

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit

oleaut32

GetErrorInfo

Sections

.bss
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

Imports

ws2_32

psapi

kernel32

user32

msvcrt

oleaut32

Sections

.bss Size: - Virtual size: 225KB

.data Size: 26KB - Virtual size: 25KB

.bss
Size: - Virtual size: 225KB

.data
Size: 26KB - Virtual size: 25KB