b34027121388a8bf0c1c0ed8a97a16adfaedbae23f4522dcc7e9827e9d593fc9

Sharing

Copy URL

Twitter E-mail

General

Target

b34027121388a8bf0c1c0ed8a97a16adfaedbae23f4522dcc7e9827e9d593fc9
Size

68KB
MD5

321803864fc20f07035b101caa5f70f3
SHA1

358f372f74d6687026e1dc96791b3cd5e511c175
SHA256

b34027121388a8bf0c1c0ed8a97a16adfaedbae23f4522dcc7e9827e9d593fc9
SHA512

3e64f7c300e0148deb0b802232492b1f7d3ea40cfe44b9ec6cd82b8b1e00131d366cfc9277b3eec8502f020f788f9a213c0753358c4763293dba63653757e0e4
SSDEEP

1536:OyMhg57F0ccPnxJZUV9JTdDMYb+y1ivS12BT4Pf8PV4y0h:OyM+xF0ccf/mV7TdDMYbj1ivk2BT4s0h

Score

N/A

Malware Config

Signatures

Files

b34027121388a8bf0c1c0ed8a97a16adfaedbae23f4522dcc7e9827e9d593fc9
.dll windows x86

3ab60b5973a671f0f9a086032ae18cdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
GetSystemDirectoryW
WinExec
CloseHandle
WriteFile
CreateFileA
ReadFile
SetFilePointer
CreateFileW
GetModuleFileNameW
FreeLibrary
TlsFree
TlsAlloc
DisableThreadLibraryCalls

Exports

Exports

FreeAddrInfoW
GetAddrInfoW
GetNameInfoW
WEP
WPUCompleteOverlappedRequest
WSAAccept
WSAAddressToStringA
WSAAddressToStringW
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncGetProtoByName
WSAAsyncGetProtoByNumber
WSAAsyncGetServByName
WSAAsyncGetServByPort
WSAAsyncSelect
WSACancelAsyncRequest
WSACancelBlockingCall
WSACleanup
WSACloseEvent
WSAConnect
WSACreateEvent
WSADuplicateSocketA
WSADuplicateSocketW
WSAEnumNameSpaceProvidersA
WSAEnumNameSpaceProvidersW
WSAEnumNetworkEvents
WSAEnumProtocolsA
WSAEnumProtocolsW
WSAEventSelect
WSAGetLastError
WSAGetOverlappedResult
WSAGetQOSByName
WSAGetServiceClassInfoA
WSAGetServiceClassInfoW
WSAGetServiceClassNameByClassIdA
WSAGetServiceClassNameByClassIdW
WSAHtonl
WSAHtons
WSAInstallServiceClassA
WSAInstallServiceClassW
WSAIoctl
WSAIsBlocking
WSAJoinLeaf
WSALookupServiceBeginA
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextA
WSALookupServiceNextW
WSANSPIoctl
WSANtohl
WSANtohs
WSAProviderConfigChange
WSARecv
WSARecvDisconnect
WSARecvFrom
WSARemoveServiceClass
WSAResetEvent
WSASend
WSASendDisconnect
WSASendTo
WSASetBlockingHook
WSASetEvent
WSASetLastError
WSASetServiceA
WSASetServiceW
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressA
WSAStringToAddressW
WSAUnhookBlockingHook
WSAWaitForMultipleEvents
WSApSetPostRoutine
WSCDeinstallProvider
WSCEnableNSProvider
WSCEnumProtocols
WSCGetProviderPath
WSCInstallNameSpace
WSCInstallProvider
WSCUnInstallNameSpace
WSCUpdateProvider
WSCWriteNameSpaceOrder
WSCWriteProviderOrder
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getprotobyname
getprotobynumber
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ab60b5973a671f0f9a086032ae18cdf

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 382B

.text
Size: 18KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 382B