66eb0e4825d75bd3240a0c417d3057c797f7a55d3c70960183654bce5b64c517

Sharing

Copy URL

Twitter E-mail

General

Target

66eb0e4825d75bd3240a0c417d3057c797f7a55d3c70960183654bce5b64c517
Size

72KB
MD5

d0a47f3a10fe3c452783b24c9327fe07
SHA1

a65619520cdc8ef6ee73805a24c0b19740cb12a7
SHA256

66eb0e4825d75bd3240a0c417d3057c797f7a55d3c70960183654bce5b64c517
SHA512

da0db404dc067cd0708762a0ca51efab92ed67cc17a231c26405ef66121cb0602c9b117af9aaa4010db8be8e94fe2ae1f98b500c6e62712565ad30a164d32358
SSDEEP

768:O4+ffiH0/Jl9lAvfa6crB2reIGq/LcYSqlk0FCLQIm8iPKdwxpr07Jya:P5Ol9qvfaNwaeLXSt0C8JP/r8J1

Score

N/A

Malware Config

Signatures

Files

66eb0e4825d75bd3240a0c417d3057c797f7a55d3c70960183654bce5b64c517
.exe windows x86

7ebb111a02cf96f5a3f9d5d6ef48ab1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
CloseHandle
GetCurrentProcess
ExitProcess
SetFileAttributesA
GetModuleFileNameA
ReleaseMutex
GetLastError
OpenMutexA
WinExec
lstrcatA
CreateThread
GetTempPathA
lstrcpynA
BeginUpdateResourceA
ReadFile
GetFileSize
GetFileAttributesA
WaitForSingleObject
CreateMutexA
GetModuleHandleA
GetStartupInfoA
Sleep
ExitThread
CreateProcessA
TerminateProcess
LoadLibraryA
GetProcAddress
GetComputerNameA
GlobalAlloc
lstrlenA
GlobalFree

user32

ExitWindowsEx
wsprintfA

advapi32

OpenSCManagerA
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenServiceA

msvcrt

__p__fmode
strstr
rand
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
_onexit
atoi
strncpy
strcspn
sprintf
localtime
time
strncmp
_except_handler3
??3@YAXPAX@Z
printf
free
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
malloc
__set_app_type
_controlfp
__dllonexit

ws2_32

gethostbyname
inet_addr
setsockopt
send
WSAStartup
socket
connect
WSAIoctl
__WSAFDIsSet
select
recv
htons
closesocket
htonl

winmm

timeGetTime

iphlpapi

GetIfTable
GetAdaptersInfo

Sections

.Buffer
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Ddos
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Breakth
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Socket
Size: 4KB - Virtual size: 288B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.SocketB
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Attack
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ebb111a02cf96f5a3f9d5d6ef48ab1a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

winmm

iphlpapi

Sections

.Buffer Size: 4KB - Virtual size: 2KB

.Ddos Size: 12KB - Virtual size: 9KB

.text Size: 4KB - Virtual size: 1KB

.Breakth Size: 4KB - Virtual size: 1KB

.Socket Size: 4KB - Virtual size: 288B

.SocketB Size: 12KB - Virtual size: 11KB

.Attack Size: 4KB - Virtual size: 432B

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 8KB

.Buffer
Size: 4KB - Virtual size: 2KB

.Ddos
Size: 12KB - Virtual size: 9KB

.text
Size: 4KB - Virtual size: 1KB

.Breakth
Size: 4KB - Virtual size: 1KB

.Socket
Size: 4KB - Virtual size: 288B

.SocketB
Size: 12KB - Virtual size: 11KB

.Attack
Size: 4KB - Virtual size: 432B

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 8KB