49974645b1644ccd072aadbdf2f2662f83e86f3082599e53fd151d3a78704270

General

Target

49974645b1644ccd072aadbdf2f2662f83e86f3082599e53fd151d3a78704270
Size

248KB
MD5

0c83d66eddc4903b2dca92329c7ce760
SHA1

9f89936038fffcee8540e99c36d1d7d7094c8e8a
SHA256

49974645b1644ccd072aadbdf2f2662f83e86f3082599e53fd151d3a78704270
SHA512

9c5d863b2491fe082bb64dda80d3653ba794d6641722fd44520db4e73efbed61d5800adee14957c47518c7c0c770c12535a65a656da4273502205e3f02ece767
SSDEEP

6144:YFLbRdFaaRLXN0WFtMJOg9poQiGc5qqXJ3zs:YdRKaRLXX8XnXc5qqXJ3

Score

N/A

Malware Config

Signatures

Files

49974645b1644ccd072aadbdf2f2662f83e86f3082599e53fd151d3a78704270
.exe windows x64

bd6e5b04896218d6b1d29b6e7cae57b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetThreadUILanguage
WideCharToMultiByte
FormatMessageW
LocalAlloc
HeapSetInformation
LocalFree
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime

msvcrt

__C_specific_handler
_XcptFilter
memcpy
_cexit
_exit
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
__getmainargs
exit
_write
_iob
_fileno
atoi
malloc
free

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

ws2_32

htons
inet_ntoa
inet_addr
setsockopt
bind
socket
gethostbyname
gethostname
WSAStartup
recvfrom
htonl
select
sendto
WSACleanup
gethostbyaddr

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 236KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd6e5b04896218d6b1d29b6e7cae57b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ntdll

ws2_32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 276B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 236KB - Virtual size: 460KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 276B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 236KB - Virtual size: 460KB