dbc653ae9869866d46cb5666e6fe1600a1c34f4481426090e874fa66064586e0

Sharing

Copy URL Twitter E-mail

General

Target

dbc653ae9869866d46cb5666e6fe1600a1c34f4481426090e874fa66064586e0
Size

161KB
MD5

29169d1f23ee7d7cddaf1cd669e1a6d1
SHA1

6b512aa70419b78ce1212200e80bbb0cf0d65e3f
SHA256

dbc653ae9869866d46cb5666e6fe1600a1c34f4481426090e874fa66064586e0
SHA512

4a403fb980d652d6ea0a8b1f19da96ebd99af89f0c00c90b6ebf58d67bf88b2c8ccda3dfb1c1cf40250ad66d949922866d596992ddd000ce02994e3f45280830
SSDEEP

1536:ZZfSLv+fiicb0gvXfMv21oXAOT+N8Zyj46SaeZJ6hEpo3S+AQEoQmhX18kds1PVO:PazdzfvfMjAJOlzEAxoj1TQtvwTBD

Score

N/A

Malware Config

Signatures

Files

dbc653ae9869866d46cb5666e6fe1600a1c34f4481426090e874fa66064586e0
.exe windows x86

a4a02a498550d7753c1335fed953d32e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
CreatePipe
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
CreateThread
GetStdHandle
FreeConsole
SetEndOfFile
CreateFileA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
GetStringTypeW
LCMapStringW
HeapSize
SetFilePointer
WriteConsoleW
HeapReAlloc
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
Beep
RtlUnwind
InterlockedExchange
GetCommandLineA
HeapSetInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
HeapDestroy
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
IsProcessorFeaturePresent
SetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetProcessHeap

wsock32

__WSAFDIsSet
select
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
getservbyport
ntohs
getservbyname
ioctlsocket
gethostbyname
inet_addr
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
closesocket
recv
send

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4a02a498550d7753c1335fed953d32e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 5KB