e8cdaf655e5fc8583fb4490ccfe60edcafefccf3dc3bd2d5c3c555182376a666

Sharing

Copy URL Twitter E-mail

General

Target

e8cdaf655e5fc8583fb4490ccfe60edcafefccf3dc3bd2d5c3c555182376a666
Size

146KB
MD5

bb21a54e8c40bfc521c717144ffdded9
SHA1

ec079ec78dc27fc286550c67ee5fc6a5eb0b5e9c
SHA256

e8cdaf655e5fc8583fb4490ccfe60edcafefccf3dc3bd2d5c3c555182376a666
SHA512

dd73e78b3988be5a9f43fea89d08c6e9cc3254353cc4522db00e38aaabdc03f0123f1f262c0acba0c37963c8be89c7204ffde315e1e12a7fe7a561288f86dcd7
SSDEEP

3072:uZse9cOqOZMSucSZ/oirq3h2epg1eM4mL:uS0qOUcuoicWs2L

Score

N/A

Malware Config

Signatures

Files

e8cdaf655e5fc8583fb4490ccfe60edcafefccf3dc3bd2d5c3c555182376a666
.exe windows x86

20c059c511b944e11b975316ca51b357

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
gethostbyname
htons
socket
connect
send
recv
closesocket
WSACleanup

opencl

clGetDeviceInfo
clGetDeviceIDs
clGetPlatformIDs
clGetPlatformInfo

kernel32

InterlockedDecrement
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
ReadFile
GetProcessHeap
SetEndOfFile
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
HeapSize
CreateFileA
SetStdHandle
WriteConsoleW

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20c059c511b944e11b975316ca51b357

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

opencl

kernel32

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 7KB - Virtual size: 15KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 7KB - Virtual size: 15KB

.reloc
Size: 8KB - Virtual size: 7KB