8e9daf993afa25fd1b1f349a81f960740635d9568a3fdeccbe839c5a252b78ad

General

Target

8e9daf993afa25fd1b1f349a81f960740635d9568a3fdeccbe839c5a252b78ad
Size

404KB
MD5

146109ec60683d6ee4c27ffd7b3ebc99
SHA1

5ad136b951914b64a082eb1107353cf3f408d171
SHA256

8e9daf993afa25fd1b1f349a81f960740635d9568a3fdeccbe839c5a252b78ad
SHA512

004e616cb97e13e435f2f3eb294ae29c72c9b3dda84dade050a418475eb8f9fec4686f9eeafcc378774d6c1fcbf1e041211d0b2de980ec55a5c8d5c01b8fbde5
SSDEEP

12288:05C+KJW4Fi0VDQTfm1j/T167bwfOXg9sX5F5LHGAT4:0EJWFKQTuxT8AfEgGJPHGK

Score

N/A

Malware Config

Signatures

Files

8e9daf993afa25fd1b1f349a81f960740635d9568a3fdeccbe839c5a252b78ad
.exe windows x86

4d06b3e0d6de817fc16c0ec145e67e5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

ws2_32

select
gethostbyname
connect
accept
WSAGetLastError
htons
__WSAFDIsSet
listen
send
ioctlsocket
recv
closesocket
socket
WSACleanup
WSAStartup
bind

kernel32

EnterCriticalSection
InterlockedExchange
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
FlushFileBuffers
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
LCMapStringW
LCMapStringA
LoadLibraryA
Sleep
GetOEMCP
GetACP
RtlUnwind
RaiseException
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
ReadFile
LeaveCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo

shell32

ShellExecuteA

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d06b3e0d6de817fc16c0ec145e67e5d

Headers

File Characteristics

Imports

netapi32

ws2_32

kernel32

shell32

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 272KB - Virtual size: 276KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 272KB - Virtual size: 276KB