eaf2bea8c169801bb628475603ac033c3d76c507c2598b97ae3e71a6d6b3e765

General

Target

eaf2bea8c169801bb628475603ac033c3d76c507c2598b97ae3e71a6d6b3e765
Size

136KB
MD5

7e2573e49189a8baf9aa208159637493
SHA1

1f1a3880a04d69eab915a4621757089c24da7623
SHA256

eaf2bea8c169801bb628475603ac033c3d76c507c2598b97ae3e71a6d6b3e765
SHA512

8b0f061d77bd543d7714df436f1f6b2b868b91fd5833f451255a98abe837976c9fbf8ba7aecbd43b5407e6be281e2a595135382cdd4b7a67e783304f2d213259
SSDEEP

1536:3SH9d0lKzI9u/DJYo83P37XwtcoUaruEioRrFLtRSpG7:kdxI9SJYH3PTwt6SZioRV

Score

N/A

Malware Config

Signatures

Files

eaf2bea8c169801bb628475603ac033c3d76c507c2598b97ae3e71a6d6b3e765
.exe windows x86

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FillConsoleOutputAttribute
SetConsoleScreenBufferSize
GetStdHandle
CloseHandle
OpenMutexA
Sleep
HeapSize
GetStartupInfoA
FlushFileBuffers
ReadFile
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
VirtualAlloc
WriteFile
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
SetConsoleTextAttribute
HeapReAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree

winmm

timeGetTime

wsock32

gethostname
recvfrom
ntohs
sendto
getsockopt
socket
htons
bind
gethostbyname
setsockopt
inet_ntoa
closesocket
WSAGetLastError
WSAStartup
htonl
WSACleanup

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

Imports

kernel32

winmm

wsock32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 1.3MB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 1.3MB

.rmnet
Size: 60KB - Virtual size: 60KB