1bcdaaf715e38c724f7bfa80ce1f1ba5eb15205096cde132a44ef7f6499c3b10

General

Target

1bcdaaf715e38c724f7bfa80ce1f1ba5eb15205096cde132a44ef7f6499c3b10
Size

128KB
MD5

e3f91da5e3bdecb5457f410cd7ebe3bc
SHA1

f625291fd3cf6c3b089c2899ecbad04157ffe0df
SHA256

1bcdaaf715e38c724f7bfa80ce1f1ba5eb15205096cde132a44ef7f6499c3b10
SHA512

c1ceba81a500aea5effe9e0b884a09594fd6f6743cc2507717af16b9e28fe7f5416774f53c8769b9c97e379a67afc7cfcd40153dd8d8619fa5d08022b7e44c51
SSDEEP

3072:Wv/hcEbuccUYCbQ9Y716hgrXrM8VIhJhy7t:Wv/h/9cfE6H8VIhH

Score

N/A

Malware Config

Signatures

Files

1bcdaaf715e38c724f7bfa80ce1f1ba5eb15205096cde132a44ef7f6499c3b10
.exe windows x86

55bf18306eaf5f6c9ecaacc0a97a647c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
htonl
getsockname
connect
ntohs
select
__WSAFDIsSet
ntohl
send
WSAStartup
WSASocketA
ioctlsocket
setsockopt
bind
listen
WSAAccept
getpeername
htons
WSAGetLastError
sendto
recvfrom
shutdown
closesocket

kernel32

IsDebuggerPresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
ReadFile
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FreeConsole
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapReAlloc
ExitThread
CreateThread
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
RtlUnwind
FlushFileBuffers
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

55bf18306eaf5f6c9ecaacc0a97a647c

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 12KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 12KB