1b2ef3bccc1a37f742fa6c1a4c0d6ea99b63699b7eda034d722baf3f5b4c23d9

Sharing

Copy URL

Twitter E-mail

General

Target

1b2ef3bccc1a37f742fa6c1a4c0d6ea99b63699b7eda034d722baf3f5b4c23d9
Size

60KB
MD5

6647a6686135dc4930c59b777d144b97
SHA1

63484a3810f209562d39c4b476e9b208add29b8e
SHA256

1b2ef3bccc1a37f742fa6c1a4c0d6ea99b63699b7eda034d722baf3f5b4c23d9
SHA512

680677f9f204de2480877814f17d3166f43fe19d7d2bc8a7f1aeaac960d3941fd0a4856e8be771e4c33f049224c12b2fa1de02b96eeaf7b2152e206c70d83d5c
SSDEEP

768:ySBn56zDPjTOlxLEHY0+f/nCgRnzZ66Z8KjbDeZVCWSZatco3ultJ:PNwfjTOxLmACgZN66LejjYzo3u/J

Score

N/A

Malware Config

Signatures

Files

1b2ef3bccc1a37f742fa6c1a4c0d6ea99b63699b7eda034d722baf3f5b4c23d9
.dll windows x86

63ac42605b5c2e6ba408a98632287a38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
ResumeThread
CreateThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
ReadFile
HeapFree
CloseHandle
InitializeCriticalSection
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
WriteFile
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
FlushFileBuffers
CreateFileA
GetCPInfo

wsock32

connect
WSAGetLastError
gethostbyname
listen
accept
inet_addr
socket
setsockopt
htons
bind
closesocket
htonl
ntohl
WSAStartup
WSACleanup
select
__WSAFDIsSet
recv
send

Exports

Exports

ConnectSocket
CreateSocket
DestroySocket
DisconnectSocket
DownloadFile
FindHost
InitWinsock
RecvPacketBinaryAsync
RecvPacketBinarySync
RecvPacketStreamAsync
RecvPacketStreamSync
RecvRequestPacket
RecvResponseCode
RecvString
SendPacketBinaryAsync
SendPacketBinarySync
SendPacketStreamAsync
SendPacketStreamSync
SendRequestPacket
SendResponseCode
SendString
TermWinsock
UploadFile
WaitForClientRequest
ack
getack
sockgets

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63ac42605b5c2e6ba408a98632287a38

Headers

File Characteristics

Imports

kernel32

wsock32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 3KB