9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d

General

Target

9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
Size

27KB
MD5

e674fc01c9972650c301861415c18460
SHA1

5265a42d368b208f10b14efab1ef5cb02d44d230
SHA256

9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
SHA512

d6f7c43da1b57f08d7683e50b71fa90a4996cf48f115dd4cfc479b9272370ec90e6bbeb94f8fed76050ea35dd0f56b3c3eb1cc5e95335542cbb3ace333a64ec7
SSDEEP

384:1/yASy0m2N4tlJQNPi20Q/IdPc8zuP/qQbDOJBpbmXwkIvuwHjCYe:S0lJwPi5Q/IVZu3qVmf2e

Score

N/A

Malware Config

Signatures

Files

9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
.dll windows x86

f70edadfcb080d96dd06f9e9b1542b6f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwSetInformationFile
ZwOpenProcessToken
ZwQueryInformationToken
memcpy
ZwWriteFile
RtlIpv4StringToAddressW
RtlIpv4AddressToStringA
RtlNtStatusToDosError
ZwCreateFile
RtlAdjustPrivilege
RtlFreeUnicodeString
wcschr
ZwQueryInformationFile
ZwOpenFile
RtlDosPathNameToNtPathName_U
LdrFindEntryForAddress
ZwLoadDriver
wcslen
ZwSetValueKey
RtlInitUnicodeString
ZwCreateKey
swprintf
ZwClose
ZwDeleteKey
RtlPrefixUnicodeString
RtlGetCurrentPeb
strchr
memcmp
sprintf
strcpy
strcmp
strlen
qsort
RtlComputeCrc32
memset
RtlCreateUserThread
LdrAddRefDll
ZwReadFile
ZwDeleteFile
ZwEnumerateKey
ZwOpenKey
ZwQueryValueKey
RtlImageNtHeader

kernel32

CreateProcessW
LocalFree
VirtualAlloc
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetSystemTimeAsFileTime
GetLastError
BindIoCompletionCallback
LocalAlloc
FreeLibraryAndExitThread
GetVersion
ExitThread
Sleep
VirtualFree
GetTickCount

ws2_32

WSASendTo
setsockopt
WSASend
WSARecv
WSAIoctl
bind
closesocket
WSAGetLastError
WSASocketW
WSACleanup
WSAStartup
WSARecvFrom

shell32

ShellExecuteExW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f70edadfcb080d96dd06f9e9b1542b6f

Headers

File Characteristics

Imports

ntdll

kernel32

ws2_32

shell32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 742B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 742B