56cb7747e8f956a3162b6e04a68f2adf71648c5efae7af97c7450ccb19ed92c4

General

Target

56cb7747e8f956a3162b6e04a68f2adf71648c5efae7af97c7450ccb19ed92c4
Size

128KB
MD5

b6a3b3a4d985a1fa36dfe24d6bfae44d
SHA1

2821629a647a8681986515862277551aa43fd664
SHA256

56cb7747e8f956a3162b6e04a68f2adf71648c5efae7af97c7450ccb19ed92c4
SHA512

c0c62429d7a07e19348747ed45188efbd89d7004b0441065f5b44b02ac28f5282dac1a5525343e84652c4f7b952c9f90ef10c0c74fd75be161088d8d6283d516
SSDEEP

3072:hxXj81Zepz9/X0J4b5M/oqEL45JeOT18/z:hxz8iz9/vIFvTwz

Score

N/A

Malware Config

Signatures

Files

56cb7747e8f956a3162b6e04a68f2adf71648c5efae7af97c7450ccb19ed92c4
.exe windows x86

e759f4bd72c7567611dca7dd6ac5b674

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

dhcpcsvc

DhcpUndoRequestParams
DhcpCApiCleanup
DhcpCApiInitialize
DhcpRegisterParamChange
DhcpRequestParams

kernel32

LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
MultiByteToWideChar
ExpandEnvironmentStringsA
SetTapePosition
VirtualProtect
CloseHandle
GetFileType
GetLastError
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
SetEndOfFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e759f4bd72c7567611dca7dd6ac5b674

Headers

File Characteristics

Imports

ole32

dhcpcsvc

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 44KB - Virtual size: 318KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 44KB - Virtual size: 318KB