e515611eae7f33b3550f781b403259e280bc09584dfc6cbf2e723da98eb61628

General

Target

e515611eae7f33b3550f781b403259e280bc09584dfc6cbf2e723da98eb61628
Size

74KB
MD5

6dcf9001f30246a4424530c30c5e62fd
SHA1

3c1f90b82917b88acf7573b731c81833a918b1f2
SHA256

e515611eae7f33b3550f781b403259e280bc09584dfc6cbf2e723da98eb61628
SHA512

ff5482d49e9f74a31a81bfd9928d8b223b34a00f4977cee948ca1b614149eab6986fdffc2f7cca008d171498d8b612e68cde61f30a1f5961bd66048d2803f205
SSDEEP

1536:U59Xyq4lWKic3kufu3VOZEqZ2Mlvbi5aSy+qLrf3H3n2Gw:U5mMcFfWCZ2Mlvbi5kff3GGw

Score

N/A

Malware Config

Signatures

Files

e515611eae7f33b3550f781b403259e280bc09584dfc6cbf2e723da98eb61628
.dll windows x86

1ff999e4a4c9a10ff03ca15ce0cf99ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
memmove
_adjust_fdiv
_initterm
free
_wcsicmp
wcslen
wcscpy
_except_handler3

ntdll

NtDelayExecution
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlInitUnicodeString
NtDeviceIoControlFile
RtlAllocateHeap
NtClose
RtlIpv4StringToAddressExW
RtlIpv4AddressToStringExW
RtlFreeHeap
NtCreateFile

kernel32

GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep

ws2_32

ntohs
htonl

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ff999e4a4c9a10ff03ca15ce0cf99ea

Headers

File Characteristics

Imports

msvcrt

ntdll

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 58KB - Virtual size: 58KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 446B

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 58KB - Virtual size: 58KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 446B