1256159274206dca392c166862871ff6c8ff85f579e28265a394a7434fc28341

General

Target

1256159274206dca392c166862871ff6c8ff85f579e28265a394a7434fc28341
Size

163KB
MD5

244f49f24935657f8893f6b9628bbc81
SHA1

5ec9c8b8b62c20d2186089bfff5d59455cf27d26
SHA256

1256159274206dca392c166862871ff6c8ff85f579e28265a394a7434fc28341
SHA512

1c8d461886be1cd54fc6f674accfbb97cacab323c59aff7f3d26eb76c55d9faa39ea459d944b3ee32424db8dc1ee7bd89e09ba24e026836b07e2fb8f7ebed830
SSDEEP

3072:f7NLcEvGgb4qfrFWgTgQgFspf/6NZ9FoRoI6qr4:Zp3b42rFWgTMGeAP6qr4

Score

N/A

Malware Config

Signatures

Files

1256159274206dca392c166862871ff6c8ff85f579e28265a394a7434fc28341
.exe windows x86

2b3ba4fb6123ff071f04eaee993de836

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
WSAStartup
setsockopt
ioctlsocket
bind
listen
accept
inet_addr
htons
connect
recv
closesocket
socket
send
select
__WSAFDIsSet

kernel32

GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetLastError
Sleep
CreateThread
GetModuleFileNameA
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
ReadFile
WriteFile
TransactNamedPipe
CloseHandle
CreateFileA
GetLocalTime
ExitProcess
CreateProcessA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
GetTempPathA
WideCharToMultiByte
GetComputerNameA
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentProcessId
CopyFileA
WaitForSingleObject
CreateMutexA
MoveFileA
GetLocaleInfoA
GetVersionExA
GetLogicalDrives
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
TerminateThread
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RaiseException
HeapSize
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2b3ba4fb6123ff071f04eaee993de836

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 116KB - Virtual size: 116KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 39KB - Virtual size: 424KB

.text
Size: 116KB - Virtual size: 116KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 39KB - Virtual size: 424KB