9fcf63ebcde90ba3edaa02f3952cb59b54aae77dcf066dbf5fb12100b158774b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fcf63ebcde90ba3edaa02f3952cb59b54aae77dcf066dbf5fb12100b158774b
Size

224KB
MD5

160e132046d18c083f5863656f847890
SHA1

8a99ef6f173a024c949efd0b8b47872b3b3acd98
SHA256

9fcf63ebcde90ba3edaa02f3952cb59b54aae77dcf066dbf5fb12100b158774b
SHA512

f604456f2a946c7b8935c6cec472bd644bccde6b3e0c43c99bddbf45300c9bc223ab33aec8396c7f0cd2871223cd3cb217ef158f50552bb3836da75020b01c52
SSDEEP

3072:CpDCl2yop+r+JltZrpRoO3BIy4O+DyEDCw+szstswOmBnrJBsn3wLPQd:CpNyoUathp2ycO6v+xtswfrkfd

Score

N/A

Malware Config

Signatures

Files

9fcf63ebcde90ba3edaa02f3952cb59b54aae77dcf066dbf5fb12100b158774b
.dll windows x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Exports

Exports

WSACleanup
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
gethostname
htonl
htons
inet_addr
ioctlsocket
listen
ntohs
recv
send
sendto
socket

Sections

.text
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 505B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ