a0cf33edbd89fbfce3b135e64c09a1cb150f07c223e372869ba4a8b0bb36e771

Sharing

Copy URL Twitter E-mail

General

Target

a0cf33edbd89fbfce3b135e64c09a1cb150f07c223e372869ba4a8b0bb36e771
Size

344KB
MD5

ff3bb377b07132d1e678824cace11dab
SHA1

b701eb83e1649a25f4b8e0eeb2e0b0979482de74
SHA256

a0cf33edbd89fbfce3b135e64c09a1cb150f07c223e372869ba4a8b0bb36e771
SHA512

27689399e11024617f66eff42ab935836921bef718b39a1f8783f02d76ef72f01b939cbf9932442d14b7aa9fd8327f644dac7b5867897b17aedee410df4fc0d2
SSDEEP

6144:OM07OlHPOk3G8PS5kRkzS/r0DblHlTF79Y1ZQmQpKSLVp9nA:QOlHPOk3hPXRkzS/r0Dbln7m1VQRLn9n

Score

N/A

Malware Config

Signatures

Files

a0cf33edbd89fbfce3b135e64c09a1cb150f07c223e372869ba4a8b0bb36e771
.dll windows x86

4de06f8bf956724ea613c7358add8e68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
CloseHandle
GetTickCount
LeaveCriticalSection
EnterCriticalSection
Sleep
FindClose
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
TerminateThread
WaitForSingleObject
SuspendThread
ResumeThread
CreateFileMappingA
LocalFree
FormatMessageA
GetLastError
CreateFileA
CreateDirectoryA
UnmapViewOfFile
MapViewOfFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
HeapFree
HeapAlloc
IsBadReadPtr
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetProcAddress
SetEnvironmentVariableA

ws2_32

closesocket
htonl
bind
listen
accept
ioctlsocket
select
__WSAFDIsSet
ntohs
socket
htons
inet_addr
gethostbyname
connect
WSACleanup
WSAStartup
send
recv
inet_ntoa
WSAGetLastError

Exports

Exports

GetNewInf

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4de06f8bf956724ea613c7358add8e68

Headers

File Characteristics

Imports

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 40KB - Virtual size: 43KB

.reloc Size: 24KB - Virtual size: 20KB

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 40KB - Virtual size: 43KB

.reloc
Size: 24KB - Virtual size: 20KB