594a67f9cb4acfee8984b6d56fb7746c72239864f6cc4c677f362267bdd880d5

Sharing

Copy URL Twitter E-mail

General

Target

594a67f9cb4acfee8984b6d56fb7746c72239864f6cc4c677f362267bdd880d5
Size

436KB
MD5

0735e1cec3bfa11044d139f631aeea90
SHA1

46dd6f3b65c7aa5860c1ac22e20a2e25c3a4e6be
SHA256

594a67f9cb4acfee8984b6d56fb7746c72239864f6cc4c677f362267bdd880d5
SHA512

2c3b26a4b850fb8edb29e1ce54a9db26c2718b75fb6adfbc0e7411d6fa0803f98c621932e8e772fed5a2ed4bf20781806a9304f1c8813875bd6f6373c483f67c
SSDEEP

6144:oAz5SulelxiJ8590xN0iN+F7FPDkAOrvdbeqL1iAOgh3mb:pllOa859aNWFBDiUqw2hW

Score

N/A

Malware Config

Signatures

Files

594a67f9cb4acfee8984b6d56fb7746c72239864f6cc4c677f362267bdd880d5
.dll windows x86

cfc1fdd1f2362c4385ba7dd7a933a3b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

send
WSAGetLastError
recv
htons
gethostbyname
inet_addr
gethostbyaddr
socket
connect
closesocket
ioctlsocket
WSAStartup

kernel32

ExitProcess
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InterlockedCompareExchange
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InterlockedIncrement
Sleep
TlsSetValue
QueryPerformanceCounter
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetProcAddress
GetModuleHandleA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TlsGetValue
TlsAlloc
TlsFree
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA

Exports

Exports

NxCloseCooking
NxCookClothMesh
NxCookConvexMesh
NxCookSoftBodyMesh
NxCookTriangleMesh
NxCreatePMap
NxGetCookingInterface
NxGetCookingParams
NxInitCooking
NxPlatformMismatch
NxReleasePMap
NxReportCooking
NxScaleCookedConvexMesh
NxSetCookingParams

Sections

.text
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cfc1fdd1f2362c4385ba7dd7a933a3b7

Headers

File Characteristics

Imports

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 288KB - Virtual size: 284KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 288KB - Virtual size: 284KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB