5b5b8294a46dcbde9818b4c650cfa70675e35fd880b8d2d64a3c86a9158ccfbc

General

Target

5b5b8294a46dcbde9818b4c650cfa70675e35fd880b8d2d64a3c86a9158ccfbc
Size

32KB
MD5

dceec161e53857342c412cb96dfe4bba
SHA1

4c91d7c39d12dbbd93b0d670d7e73d06069cc06f
SHA256

5b5b8294a46dcbde9818b4c650cfa70675e35fd880b8d2d64a3c86a9158ccfbc
SHA512

6cb142145b74c64f1444104ea07293f2d741879900d81efe413e65a32120b5ea5105e03593aa0212ef743246f5e7c15d9474eb2ddd2d4575de74fc6d57a23d9a
SSDEEP

192:Ndr++LhEDA1j8Ib28LJ7uS6ko+8dKUS1bL2N9w/tyhpPWnlwwpQcdHRoyncgJge9:LLhY8vzJYh01gpOOw/FRd9/Xl

Score

N/A

Malware Config

Signatures

Files

5b5b8294a46dcbde9818b4c650cfa70675e35fd880b8d2d64a3c86a9158ccfbc
.exe windows x86

e794cad8a2884081d8342c41a1f92350

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
OutputDebugStringA
Sleep
SetProcessWorkingSetSize
GetCurrentProcess
lstrcpyA
lstrcatA
CreateProcessA
GetTickCount
CreateThread
GlobalMemoryStatusEx
GetSystemInfo
CloseHandle
WaitForSingleObject
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
lstrlenA
GetProcAddress

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey

ws2_32

setsockopt
gethostbyname
select
__WSAFDIsSet
shutdown
WSAIoctl
send
WSAStartup
WSASocketA
recv
htonl
sendto
socket
htons
connect
closesocket
inet_addr

iphlpapi

GetIfTable

msvcrt

strchr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
sprintf
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
rand
srand
??2@YAPAXI@Z
strstr
malloc
free
exit

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e794cad8a2884081d8342c41a1f92350

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

iphlpapi

msvcrt

Sections

.text Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 16B