c1d139d65ceae1982584683693e65856acf7e698f22a8d47367b5b64e2e27596

General

Target

c1d139d65ceae1982584683693e65856acf7e698f22a8d47367b5b64e2e27596
Size

180KB
MD5

543d0d4bbda9c0b9663113f52016ff78
SHA1

3795c70d881a1a7e30f4a9fd1f7548aca05cd5db
SHA256

c1d139d65ceae1982584683693e65856acf7e698f22a8d47367b5b64e2e27596
SHA512

553ae5972c2643824f95f4fe332d4581c5e2c10e900a1f2d9deb7b21b9a57a320b6d04ed66a9a500aa0a417b31bddace359f99a182ad45caa67fbc35861625c2
SSDEEP

3072:LcDjUEvf8IaZe7mF34gC4rle3sA7ycIw6hhcDXIvSBf8TwfSjH:ADjUEvfvawyF3tCXyHZeLIrEfSjH

Score

N/A

Malware Config

Signatures

Files

c1d139d65ceae1982584683693e65856acf7e698f22a8d47367b5b64e2e27596
.exe windows x86

ec9c9c57e09b71b87abe6015c9582819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetLastError
gethostname
accept

kernel32

VirtualFree
SetStdHandle
SetFilePointer
GetLocaleInfoA
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetTickCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
RaiseException
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
FlushFileBuffers
RtlUnwind
WriteFile
HeapAlloc
GetProcessHeap
CloseHandle
FreeLibrary
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
VirtualQuery
InterlockedExchange
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec9c9c57e09b71b87abe6015c9582819

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 108KB - Virtual size: 188KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 108KB - Virtual size: 188KB