739d5f7e37db83361aca83fd2e579867f2edb4d964903dcbd22b20ea2217a848

General

Target

739d5f7e37db83361aca83fd2e579867f2edb4d964903dcbd22b20ea2217a848
Size

248KB
MD5

0a45bedebe3a9d7bb75a6695205c1e40
SHA1

ff25f46a07ad575a32208126766e8e77462fbf42
SHA256

739d5f7e37db83361aca83fd2e579867f2edb4d964903dcbd22b20ea2217a848
SHA512

de2fa1785bbd25ed0b0be237fb04af86aeddb027807d374df770b28f26bb9d39da96517eef14113014ee4f3f2da454b963d73b0baad22a3fb2a039d8ef6b800f
SSDEEP

768:7bVoESHkA6w/6Sgub7fHyS3YwEFa4uTwSBBQARQk1Jv:XV3SH5Ea4uTZBBQAR

Score

N/A

Malware Config

Signatures

Files

739d5f7e37db83361aca83fd2e579867f2edb4d964903dcbd22b20ea2217a848
.dll windows x86

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
_snprintf
_strupr
RtlZeroMemory
atoi
memcmp
memcpy
strlen
strstr

ws2_32

gethostbyname
connect
closesocket
socket
send
gethostname
recv
inet_addr
htons

kernel32

lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
MoveFileExA
MapViewOfFile
GetTempPathA
GetTempFileNameA
GetStartupInfoA
GetLastError
GetFileSize
GetExitCodeThread
DeleteFileA
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
CreateProcessA
ExitProcess
IsBadReadPtr
WritePrivateProfileStringA
CreateFileA
CreateFileMappingA

user32

SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 28KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 204KB - Virtual size: 202KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 204KB - Virtual size: 202KB

.reloc
Size: 4KB - Virtual size: 1KB