e54e7abd97eb5f61e52d158f7d71e3e8d073ebae2a3ba155f49b825499646d49

Sharing

Copy URL

Twitter E-mail

General

Target

e54e7abd97eb5f61e52d158f7d71e3e8d073ebae2a3ba155f49b825499646d49
Size

215KB
MD5

e45ea76f4e3c00c2623f9f542414b723
SHA1

5ad4d633a82448f8fd1fec2e100abae0f37a6aa0
SHA256

e54e7abd97eb5f61e52d158f7d71e3e8d073ebae2a3ba155f49b825499646d49
SHA512

bdf38faaa4a96142f1c9097c868fdb989327a9321dbf976997e141efab95ef0d582416091ffc6ab1d2ec2f91610756b9eed1d60e91dca4f52da663e447377e53
SSDEEP

3072:IR+NKz4vu9lHFloL/zlEcOOB+/xXDmHJCXdHUoh+at8wYF9IoL9Y8B7MdL:E0QllGzKcPWxTkCXdHU7wuO+8

Score

N/A

Malware Config

Signatures

Files

e54e7abd97eb5f61e52d158f7d71e3e8d073ebae2a3ba155f49b825499646d49
.dll windows x86

450e3b65c2d26a1c0e413b1ec3d90c2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

__WSAFDIsSet
recvfrom
bind
getsockname
ntohs
inet_ntoa
htonl
sendto
connect
inet_addr
send
closesocket
select
recv
socket
gethostbyname
htons
setsockopt
WSACleanup
WSAStartup

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
TerminateThread
Sleep
WaitForSingleObject
VirtualFree
VirtualAlloc
GetLastError
InterlockedExchange
CancelIo
GetLocalTime
HeapAlloc
GetProcessHeap
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
lstrcatA
WideCharToMultiByte
DeleteFileA
CreateDirectoryA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetLogicalDriveStringsA
FindClose
LocalFree
FindFirstFileA
LocalAlloc
GetFileSize
SetFilePointer
MoveFileA
MultiByteToWideChar
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetStartupInfoA
TerminateProcess
GetCurrentThreadId
GlobalMemoryStatus
GetComputerNameA
OpenEventA
GetCurrentProcess
SetFileAttributesA
RtlUnwind
RaiseException
CreateThread
TlsSetValue
TlsGetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
GetFileAttributesA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
TlsAlloc
TlsFree
SetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW

user32

IsWindow
DispatchMessageA
wsprintfA
CharNextA
GetWindowTextA
MessageBoxA
LoadCursorA
SendMessageA
SetCapture
SetCursorPos
CloseClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
DestroyCursor
ExitWindowsEx
OpenDesktopA
PostMessageA

advapi32

InitializeSecurityDescriptor
LsaRetrievePrivateData
LsaFreeMemory
RegRestoreKeyA
RegSaveKeyA
AdjustTokenPrivileges
CreateServiceA
OpenProcessToken
GetTokenInformation
IsValidSid
AllocateAndInitializeSid
InitializeAcl
SetSecurityDescriptorDacl
FreeSid
ClearEventLogA
CloseEventLog

netapi32

NetUserAdd
NetLocalGroupAddMembers

Exports

Exports

ServiceMain

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

450e3b65c2d26a1c0e413b1ec3d90c2a

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

netapi32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 20KB - Virtual size: 28KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 20KB - Virtual size: 28KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 10KB - Virtual size: 10KB