7df7a38f6e6ebc2804c5f58cac0f5e70e458ac4773ef7f0c93829b7ee815391b

General

Target

7df7a38f6e6ebc2804c5f58cac0f5e70e458ac4773ef7f0c93829b7ee815391b
Size

248KB
MD5

054d11d858efbf8d2ce0f57cd78a0d80
SHA1

dc9bfc23e0b924dff60936ee272881b3c438e2aa
SHA256

7df7a38f6e6ebc2804c5f58cac0f5e70e458ac4773ef7f0c93829b7ee815391b
SHA512

28da7834b90ba33f201edb7505e3a23da1f11cb69a49d2a5964bf6d6599e545dea1ede9998bf2771d2f085f335d07a652e07504b08b0d2c36658e59ab245761b
SSDEEP

768:7bVoESHkA6w/6Sgub7fHyS3YwEFa4uTwSBBQARQk1Jv:XV3SH5Ea4uTZBBQAR

Score

N/A

Malware Config

Signatures

Files

7df7a38f6e6ebc2804c5f58cac0f5e70e458ac4773ef7f0c93829b7ee815391b
.dll windows x86

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
_snprintf
_strupr
RtlZeroMemory
atoi
memcmp
memcpy
strlen
strstr

ws2_32

gethostbyname
connect
closesocket
socket
send
gethostname
recv
inet_addr
htons

kernel32

lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
MoveFileExA
MapViewOfFile
GetTempPathA
GetTempFileNameA
GetStartupInfoA
GetLastError
GetFileSize
GetExitCodeThread
DeleteFileA
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
CreateProcessA
ExitProcess
IsBadReadPtr
WritePrivateProfileStringA
CreateFileA
CreateFileMappingA

user32

SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea4f65c10c7532bf944548fc85e1bfc4

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 28KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 204KB - Virtual size: 202KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 204KB - Virtual size: 202KB

.reloc
Size: 4KB - Virtual size: 1KB