c58c2e16c1db9542c5179a1dc1a2b319e193427f00b49cf5ef88f559e48a11bc

General

Target

c58c2e16c1db9542c5179a1dc1a2b319e193427f00b49cf5ef88f559e48a11bc
Size

182KB
MD5

34ef584d0e8ce42e89ab47dc189d9bf0
SHA1

6a4e24a475c0ff14272438b75bce1b1bc427b924
SHA256

c58c2e16c1db9542c5179a1dc1a2b319e193427f00b49cf5ef88f559e48a11bc
SHA512

669f9c38907bd771aa8c9f0c346629509ec1e82acf0b55463cae452834b908394c24d3348578a2b6aad51a69d9ed03a3e9f79d523172d881bb8f1b07aed1148f
SSDEEP

3072:y0IP7d9q2rBNnXoIJL5F3nUVB4xNP5t9DWEXX57XyrevtkBzn7N:yd7d91rBRtdAmxlH9PbVK

Score

N/A

Malware Config

Signatures

Files

c58c2e16c1db9542c5179a1dc1a2b319e193427f00b49cf5ef88f559e48a11bc
.dll windows x86

23da7b5cd0238222b356953389287aa0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

ntohs

ntdll

NtDelayExecution
RtlFreeHeap
RtlInitUnicodeString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
NtDeviceIoControlFile
RtlIpv6AddressToStringExW
_wcsicmp
wcslen
wcscpy
memmove
RtlIpv6StringToAddressExW

kernel32

HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CreateFileW
HeapAlloc
DeviceIoControl
GetLastError
CloseHandle
DisableThreadLibraryCalls
GetProcessHeap

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress
freeaddrinfo
getaddrinfo
getnameinfo

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23da7b5cd0238222b356953389287aa0

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

ntdll

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 170KB - Virtual size: 169KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 288B

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 170KB - Virtual size: 169KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 288B