87b055587a6e33d16e20e94762378b607090077bb222de6b1271260a28554d3b

Sharing

Copy URL Twitter E-mail

General

Target

87b055587a6e33d16e20e94762378b607090077bb222de6b1271260a28554d3b
Size

116KB
MD5

4c6005d007c8f50ec09bca342d45e5b0
SHA1

79e52c8c5d6a2ecb2e90fabfeee8ddd14e5e952b
SHA256

87b055587a6e33d16e20e94762378b607090077bb222de6b1271260a28554d3b
SHA512

d8adc6347bdd997ebb544ac1f07a0c879584d901d5f81992ce02844d1bfd6eed9726ee703244c5db1b5f58cb7e861ded134b3b05e9849e93b2f0e1df320a0838
SSDEEP

1536:4ZdARpTn0xdsyeBrk5diWYvVgn752QiPHZKfcnTIXSb6n:G+GxdReBrajKVgn756KfcnTICb6n

Score

N/A

Malware Config

Signatures

Files

87b055587a6e33d16e20e94762378b607090077bb222de6b1271260a28554d3b
.dll windows x86

16c09feaf9415149755cd6cae8e8e135

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualProtect
IsBadWritePtr
IsBadReadPtr
GetVersion
IsBadCodePtr
LoadLibraryA
CreateFileA
IsDebuggerPresent
RestoreLastError
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
LockResource
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
RaiseException
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
SetStdHandle
ReadFile

wsock32

recv
connect
send

Exports

Exports

i_connect
i_recv
i_send

Sections

v�A0
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

v�A1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

v�A2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.exp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16c09feaf9415149755cd6cae8e8e135

Headers

File Characteristics

Imports

kernel32

wsock32

Exports

Exports

Sections

v�A0 Size: 73KB - Virtual size: 76KB

v�A1 Size: 27KB - Virtual size: 28KB

v�A2 Size: 3KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

.mackt Size: 4KB - Virtual size: 4KB

.exp Size: 512B - Virtual size: 4KB

v�A0
Size: 73KB - Virtual size: 76KB

v�A1
Size: 27KB - Virtual size: 28KB

v�A2
Size: 3KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB

.mackt
Size: 4KB - Virtual size: 4KB

.exp
Size: 512B - Virtual size: 4KB