968ef5c5b6ee656fe55e9d6ba4cb8f4f6495b26e963c3748f555ad8c0d5d7ccc

Sharing

Copy URL

Twitter E-mail

General

Target

968ef5c5b6ee656fe55e9d6ba4cb8f4f6495b26e963c3748f555ad8c0d5d7ccc
Size

480KB
MD5

ad5159c6d9dd813db8cf5f4b212111e0
SHA1

b1c9faa03222e57c9e3e1146c463c8e069d8df8c
SHA256

968ef5c5b6ee656fe55e9d6ba4cb8f4f6495b26e963c3748f555ad8c0d5d7ccc
SHA512

922a694efb32df595ccd43ececba92f2ba6058eecd5850ea6b4430fd0fc065858e3f018448ae0f74f5b4a6188b578d9c065d956b979bb87472169a21166ea112
SSDEEP

6144:CykRRwqavAdKP7OBd8SvsHykHhp2W1RLTLWDbpGqLW//5CiGyqJoZEkXLI+5w:lkL9KTOBOHjnNj/eGqLq5Ci+WEkbz5w

Score

N/A

Malware Config

Signatures

Files

968ef5c5b6ee656fe55e9d6ba4cb8f4f6495b26e963c3748f555ad8c0d5d7ccc
.exe windows x86

b3f31a36459f81eec9b2d8f6ab1fd669

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
getsockname
socket
sendto
gethostbyname
WSACleanup
WSAStartup
gethostname

dbghelp

SymUnDName
SymUnDName64
SymSetSearchPath
SymSetOptions
SymSetContext
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymRegisterCallback
SymUnloadModule64

kernel32

WriteFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
HeapSize
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
VirtualQuery
LoadLibraryA
GetOEMCP
GetACP
RtlUnwind
IsValidCodePage
GetSystemInfo
GetDiskFreeSpaceW
GetCurrentThreadId
RemoveDirectoryW
CreateEventW
GetVersion
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
CreateProcessW
GetFileAttributesW
GetProcAddress
LoadLibraryW
SetTapeParameters
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapFree
HeapAlloc
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
WideCharToMultiByte
GetTimeZoneInformation
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f31a36459f81eec9b2d8f6ab1fd669

Headers

File Characteristics

Imports

ws2_32

dbghelp

kernel32

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 268KB - Virtual size: 267KB

.data Size: 78KB - Virtual size: 184KB

.idata Size: 39KB - Virtual size: 39KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 268KB - Virtual size: 267KB

.data
Size: 78KB - Virtual size: 184KB

.idata
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 22KB - Virtual size: 22KB