ef4782c230df67e9743f662108704bfe2a99894219ec59cf9a242c7eddb1adfe

General

Target

ef4782c230df67e9743f662108704bfe2a99894219ec59cf9a242c7eddb1adfe
Size

7KB
MD5

d462ee0a1da1cf60831f99f86e9df359
SHA1

abb2df736e6efd3c0bd0636bfe657b6b7acc9a44
SHA256

ef4782c230df67e9743f662108704bfe2a99894219ec59cf9a242c7eddb1adfe
SHA512

f33c0d15f0a1ba13dec9bdbd5cc6e03141dea81121ce2f9e187ee14f0e7b5f2f453eb33078b41312c2811ccd56678453a60644bea75c5d1bb9c855844cb7fba5
SSDEEP

96:Xso0xI6Mhd3lRMnijS7VhGVYovoWxfaasxRe3DB9i05zbakgFIgFk44ujTYDBP+x:Xp6UzpqWiRe55zbakuIuGlDBP+dfxN

Score

N/A

Malware Config

Signatures

Files

ef4782c230df67e9743f662108704bfe2a99894219ec59cf9a242c7eddb1adfe
.dll windows x86

e917a95de9ab070e93f98f55546c42ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetFileSize
SetFilePointer
lstrcpynA
SetEndOfFile
SetErrorMode
FreeLibrary
MoveFileExW
WriteFile
GlobalAlloc
GetSystemDirectoryW
LoadLibraryW
Sleep
CopyFileW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
RtlMoveMemory
FreeLibraryAndExitThread
GetLastError
GetProcAddress
MoveFileW
DisableThreadLibraryCalls
GlobalFree
CreateEventW
lstrcatW
CloseHandle
DeleteFileW
GetSystemTime
lstrcpyW
RtlZeroMemory
CreateThread
lstrcpyA

user32

wsprintfW

shell32

ord64

ws2_32

setsockopt
shutdown
WSACleanup
htons
WSAStartup
connect
ioctlsocket
WSACloseEvent
recv
socket
WSACreateEvent
closesocket
gethostbyname
send
WSAWaitForMultipleEvents
WSAEventSelect

shlwapi

PathRenameExtensionW
PathAppendW
SHRegSetUSValueW
PathFindFileNameW

rpcrt4

RpcStringFreeW
UuidToStringW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e917a95de9ab070e93f98f55546c42ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ws2_32

shlwapi

rpcrt4

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 548B

.reloc Size: 512B - Virtual size: 462B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 548B

.reloc
Size: 512B - Virtual size: 462B