ea194dd85caf568a265863eb25d1f6beefde5511484972c5f98f209bc5b0be5a

General

Target

ea194dd85caf568a265863eb25d1f6beefde5511484972c5f98f209bc5b0be5a
Size

48KB
MD5

52ad78f17d799a0bab37e3e4626fc16a
SHA1

1d660b3d318cd5b92d60bcd61901392c85b5db3f
SHA256

ea194dd85caf568a265863eb25d1f6beefde5511484972c5f98f209bc5b0be5a
SHA512

e6b221b211c2bca225b8de69d3c1012e70c17729c8611702223519975100ab7865d8610175e4e964c22c88a9a720526d78b5809ccb3cf2d20357e9e6e2eb1ff5
SSDEEP

768:l8XLbDUvG232gM/HQa9Y7FEeyD0nRIv/P:l0UvGu2N19De1RIXP

Score

N/A

Malware Config

Signatures

Files

ea194dd85caf568a265863eb25d1f6beefde5511484972c5f98f209bc5b0be5a
.exe windows x86

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc

msvcrt

_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64

ws2_32

bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.text Size: 31KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 256B

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 13KB - Virtual size: 31KB

.data
Size: - Virtual size: 522KB

.text
Size: 31KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 256B

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 13KB - Virtual size: 31KB