7f6a321bce7b4aab6d861b76ff3765329055b6f05896b7777a58a0ee501ff3e3

General

Target

7f6a321bce7b4aab6d861b76ff3765329055b6f05896b7777a58a0ee501ff3e3
Size

116KB
MD5

3b082b86178a0fcd42151bd953109c70
SHA1

4c0be7b50b38caceea97cf2fe66b296d1e0de280
SHA256

7f6a321bce7b4aab6d861b76ff3765329055b6f05896b7777a58a0ee501ff3e3
SHA512

872e32c5d01320632b2b6be9eb5f47c04fdb014b7643c3aa9a787fa189c693230e8951acf2d9c160c9ee7b514ac06682c3756dd991b699629a10b8fcc1e4322a
SSDEEP

3072:rXYtM7Hxup7XtyzioRWDvSDADeak7dJHB/Ap:rOMsGKDvSsQLH5Ap

Score

N/A

Malware Config

Signatures

Files

7f6a321bce7b4aab6d861b76ff3765329055b6f05896b7777a58a0ee501ff3e3
.exe windows x86

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FillConsoleOutputAttribute
SetConsoleScreenBufferSize
GetStdHandle
CloseHandle
OpenMutexA
Sleep
HeapSize
GetStartupInfoA
FlushFileBuffers
ReadFile
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
VirtualAlloc
WriteFile
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
SetConsoleTextAttribute
HeapReAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree

winmm

timeGetTime

wsock32

gethostname
recvfrom
ntohs
sendto
getsockopt
socket
htons
bind
gethostbyname
setsockopt
inet_ntoa
closesocket
WSAGetLastError
WSAStartup
htonl
WSACleanup

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtq
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

Imports

kernel32

winmm

wsock32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 1.3MB

.wtq Size: 40KB - Virtual size: 37KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 1.3MB

.wtq
Size: 40KB - Virtual size: 37KB