d11054e3446e95f3cfa4e3cff1324dbbceea8261f682f6df1f1ce33dc80c62ae

General

Target

d11054e3446e95f3cfa4e3cff1324dbbceea8261f682f6df1f1ce33dc80c62ae
Size

20KB
MD5

b8dc08e1e06c30cecc34a9e3a522d82f
SHA1

8bb3c687f0beffa97c3984124356e85dcbb34ae2
SHA256

d11054e3446e95f3cfa4e3cff1324dbbceea8261f682f6df1f1ce33dc80c62ae
SHA512

f3aca3e40cad555ceb469ee42bfabc8b7bfe4a15ab016a2945cd3914d0a3d4b251ead76ea2cdc46b0dbaf3fc8344f0e28a3ca89b8878a401a0762fc1d8f8b8ad
SSDEEP

384:+BwmSQ73afF310PqTxDmdYu1XG7N+Z2hqCQOol/X99973bHmSzfmrWi+RdW:+OQOFFWqlE63h/kLZz7R

Score

N/A

Malware Config

Signatures

Files

d11054e3446e95f3cfa4e3cff1324dbbceea8261f682f6df1f1ce33dc80c62ae
.dll windows x86

6e09a04290c97abc38188399d8f00899

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekNamedPipe
CreateProcessA
CloseHandle
WaitForSingleObject
CreatePipe
GetDriveTypeA
GetLogicalDrives
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
WriteFile
FindFirstFileA
GetLastError
CreateFileA
DeleteFileA
DisableThreadLibraryCalls
CopyFileA
GetEnvironmentVariableA
GetCurrentDirectoryA
CreateThread
FindClose
Sleep
SetFilePointer
TerminateProcess

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus

msvcrt

rand
atoi
_initterm
??2@YAPAXI@Z
sprintf
malloc
_adjust_fdiv
free
_strnicmp
_strupr
_stricmp

ws2_32

WSAStartup
connect
closesocket
bind
socket
WSACleanup
WSASetLastError
recv
__WSAFDIsSet
select
send
gethostbyname
inet_addr
htons
gethostname
setsockopt

Exports

Exports

ServiceMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e09a04290c97abc38188399d8f00899

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 53KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 1024B - Virtual size: 756B

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 53KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 1024B - Virtual size: 756B