2476e3c711d3b91ececad1ba2fc242a25f1ec7b5a4609004f17b7856cdbe19dc

Sharing

Copy URL Twitter E-mail

General

Target

2476e3c711d3b91ececad1ba2fc242a25f1ec7b5a4609004f17b7856cdbe19dc
Size

259KB
MD5

6f34337be958263c53f9b68cb4b79630
SHA1

35656b179d8bebe2fd938c5b6dd85a06edb852be
SHA256

2476e3c711d3b91ececad1ba2fc242a25f1ec7b5a4609004f17b7856cdbe19dc
SHA512

744ef39bc77ba28802401c0ac41ceb4f321de2ab7589951541a1807d2a9fe9d9d85e79daaf01fe2c0cc958a4f0f1acee2a69196ecf7b61b793da0527af770bae
SSDEEP

6144:1A6Pd5agreEMALOlX3k0Bz7srSwR6nKW2CJh6NG:HP7a6ZGXUoz7srSwC7JyG

Score

N/A

Malware Config

Signatures

Files

2476e3c711d3b91ececad1ba2fc242a25f1ec7b5a4609004f17b7856cdbe19dc
.exe windows x86

260a2e76c7c7dfaa2c9bde98b40dacf5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FreeConsole
Beep
GetEnvironmentVariableA
CreateDirectoryA
CopyFileA
CreateThread
SetEnvironmentVariableA
CompareStringW
SetStdHandle
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
HeapAlloc
CloseHandle
FlushFileBuffers
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
OutputDebugStringW
WriteConsoleW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
RtlUnwind
RaiseException
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
GetLastError
GetFileAttributesA
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
WriteFile
GetStdHandle
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
OutputDebugStringA
CreateFileW

user32

MessageBoxA
SetSystemCursor
LoadCursorFromFileA

ws2_32

inet_addr
htons
recv
bind
WSAStartup
closesocket
gethostbyname
send
listen
accept
inet_ntoa
connect
gethostname
socket

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

260a2e76c7c7dfaa2c9bde98b40dacf5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

Sections

.text Size: 182KB - Virtual size: 182KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 182KB - Virtual size: 182KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 15KB - Virtual size: 15KB