248f4d4c6dd550c3b41b6f33896d0713d99142a1f5fa9a62ef115694f658015a

General

Target

248f4d4c6dd550c3b41b6f33896d0713d99142a1f5fa9a62ef115694f658015a
Size

102KB
MD5

20912f97ddcae959c4fe43d411b899f9
SHA1

30dc4dd8fec413d1cc352f92e293aa8f39a889ba
SHA256

248f4d4c6dd550c3b41b6f33896d0713d99142a1f5fa9a62ef115694f658015a
SHA512

1eaea9a7701801f25fe8e2acd1f12521a62dfdb15932225d7056f111f2dc56db848bbba1defd2fff6cf4d77fa7320475659f608115d63e100f018c1138638d73
SSDEEP

1536:U8oMIT5u9Jb0s2JeAMKn04P9JPlo7c5fRQqhNAdSzOwnD9O/GWtFL67n72hEfH:U8oMITo0seeAVPlacLXzlD917X

Score

N/A

Malware Config

Signatures

Files

248f4d4c6dd550c3b41b6f33896d0713d99142a1f5fa9a62ef115694f658015a
.dll windows x86

9f426d4c45e7ba3b1c67477a513e82cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
send
WSASetLastError
WSAGetLastError
select
__WSAFDIsSet
socket
htons
closesocket
WSAStartup
recv
inet_addr
gethostbyname
ioctlsocket
connect

kernel32

GetStdHandle
WideCharToMultiByte
WriteFile
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
GetVersion
ExitProcess
SetEndOfFile
GetOEMCP
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeLibrary
TerminateThread
Sleep
SetThreadPriority
CreateThread
DeleteFileA
GetLastError
LoadLibraryA
Beep
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
CompareFileTime
CloseHandle
GetFileTime
CreateFileA
GetPrivateProfileStringA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
RaiseException
GetCommandLineA
GetACP
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
GetModuleHandleA
InitializeCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
MultiByteToWideChar
LCMapStringA
VirtualAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetCPInfo

winmm

timeGetTime

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

DeleteServerInterface
GetServerInterface

Sections

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f426d4c45e7ba3b1c67477a513e82cf

Headers

File Characteristics

Imports

ws2_32

kernel32

winmm

advapi32

Exports

Exports

Sections

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 90KB - Virtual size: 97KB

.reloc Size: 5KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 90KB - Virtual size: 97KB

.reloc
Size: 5KB - Virtual size: 4KB