dd282d25348c575ae12840ef6dd73086827bfe4e37d1af8856f5fb430ec3dfa0

General

Target

dd282d25348c575ae12840ef6dd73086827bfe4e37d1af8856f5fb430ec3dfa0
Size

228KB
MD5

522d47e21fb2ea913d17463ee22cd780
SHA1

e45bf03f20758f63c0044d1128e25daeb54be8f7
SHA256

dd282d25348c575ae12840ef6dd73086827bfe4e37d1af8856f5fb430ec3dfa0
SHA512

8020d2b49b4b88ad8fae59a6a6426efeeace7c36f84b9a00a15455b70ca02037ffca9a330ecfbfbc4d30654a336422daff3b3f3ce1544a4356dc8aafe319aea3
SSDEEP

6144:65CLI4spfq45GR5GR5GGCraK5GR5GGCrai:6HaySSIawSIai

Score

N/A

Malware Config

Signatures

Files

dd282d25348c575ae12840ef6dd73086827bfe4e37d1af8856f5fb430ec3dfa0
.exe windows x86

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup

psapi

EnumProcessModules
GetModuleFileNameExA

kernel32

Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc

user32

ShowWindow
wsprintfA
IsCharAlphaNumericA

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit

oleaut32

GetErrorInfo

Sections

.bss
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

Imports

ws2_32

psapi

kernel32

user32

msvcrt

oleaut32

Sections

.bss Size: - Virtual size: 225KB

.data Size: 26KB - Virtual size: 25KB

.bss
Size: - Virtual size: 225KB

.data
Size: 26KB - Virtual size: 25KB