ef79e8f9ec1ad1a0e278e470762a64dd2d2cfb8d066f01c6232e5ed0605cdcca

General

Target

ef79e8f9ec1ad1a0e278e470762a64dd2d2cfb8d066f01c6232e5ed0605cdcca
Size

160KB
MD5

9e12cdc2353e0c13b491ac11454d7de4
SHA1

f4d268d8c37a95755960773eb20faa0864b22cda
SHA256

ef79e8f9ec1ad1a0e278e470762a64dd2d2cfb8d066f01c6232e5ed0605cdcca
SHA512

f95b11004d451afb0f771096aaaac537af22b6392c48766147ed00528fa4b9ae4bbf7d740095a6ff60c2197d1abbe6d7221677c0ff12b288fa35464a35ebcacf
SSDEEP

768:PTCjzQ5xFVBMUrObOtpa1BXla4AV2+BMiSEd9iVFkAJ/gtTx9svyNl6y2SoaPR0:RbVu5FF6ZBHdOFkAGtTwvI64oaW

Score

N/A

Malware Config

Signatures

Files

ef79e8f9ec1ad1a0e278e470762a64dd2d2cfb8d066f01c6232e5ed0605cdcca
.exe windows x86

7270e5b90d142e79ea6fad2e6f36ce6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
inet_addr
WSAStartup
gethostbyname
socket
connect
send
recv

kernel32

FreeEnvironmentStringsW
FreeEnvironmentStringsA
CloseHandle
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetLastError
UnhandledExceptionFilter
GetACP
VirtualFree
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
SetConsoleCtrlHandler
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7270e5b90d142e79ea6fad2e6f36ce6e

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB