b34c73178ecf7b16feb87e7ca211a6edf07f11622ed093e9580ae79240b6d2bb

General

Target

b34c73178ecf7b16feb87e7ca211a6edf07f11622ed093e9580ae79240b6d2bb
Size

28KB
MD5

2a3827d7c6831d8c8d23f3657ce93ff1
SHA1

a0f7b8b198c6d477e45f89efbcb13d18d63bc370
SHA256

b34c73178ecf7b16feb87e7ca211a6edf07f11622ed093e9580ae79240b6d2bb
SHA512

044aeb14f570d875c59211baecad09808acd0a6a4532429eb9f4d39fdf790ebc37241dda21ba38717271b427456f0c9c6d54ba23bb3dd8484d7be527183505c1
SSDEEP

192:8eM4p2ULqHtLS0p9U4J2MjGls5l4W+6OfMSs5nu1Xw0zsE9UP1oyntcyD:V57Qt2bq285l4dMSs5u1RX961l

Score

N/A

Malware Config

Signatures

Files

b34c73178ecf7b16feb87e7ca211a6edf07f11622ed093e9580ae79240b6d2bb
.exe windows x86

5c7f6c8cfb7f3eec8a5b9b9432564d6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SetEvent
CreateEventA
WaitForSingleObject
CloseHandle
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
GetTickCount
lstrcpyA
GetStartupInfoA

advapi32

RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
CloseServiceHandle
StartServiceCtrlDispatcherA
SetServiceStatus

ws2_32

send
gethostbyname
__WSAFDIsSet
recv
WSAStartup
socket
htons
bind
listen
inet_addr
closesocket
select
accept
WSACleanup
connect

msvcrt

_snprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
fclose
fwrite
fread
fopen
_beginthreadex
_initterm
??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
__CxxFrameHandler
atoi
malloc
strstr
strncmp
strtok
memchr
strspn
strtol
free
memmove
_strnicmp
_stricmp
_strdup
_exit
_XcptFilter
exit
_acmdln
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c7f6c8cfb7f3eec8a5b9b9432564d6a

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 528B

.rsrc Size: 4KB - Virtual size: 612B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 528B

.rsrc
Size: 4KB - Virtual size: 612B