f5575fa83fee87aef8f0f9d91b5feece9732fe1418dda867f710ec676a7337b0

General

Target

f5575fa83fee87aef8f0f9d91b5feece9732fe1418dda867f710ec676a7337b0
Size

40KB
MD5

8e3f0e2f6bf50a77f2efdf7593e3f760
SHA1

215f257d85d68473e6e08d7be8e09d930b8248e0
SHA256

f5575fa83fee87aef8f0f9d91b5feece9732fe1418dda867f710ec676a7337b0
SHA512

4e725c34cea3764b491b20df668989f3cc1c0e608af058cb1bbb5225e265110a93ca176d1fcd427ce1fc9001acd97fd39954933ed8b2fd30abadf3fff2699871
SSDEEP

768:D+wd518DyYb6KZNVXB+WaixlGZUdFmvPkN7R13b3XnDvr3zvDfXuUV707IkefYYj:D+wdX8Dy+6KZNVXB+WaixKkF9N7R13bR

Score

N/A

Malware Config

Signatures

Files

f5575fa83fee87aef8f0f9d91b5feece9732fe1418dda867f710ec676a7337b0
.dll windows x86

84e5c2c438402f21450b771813b7c3cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
RegisterClassExA
wsprintfA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
PostQuitMessage

wsock32

closesocket
connect
gethostbyaddr
gethostbyname
gethostname
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohs
recv
select
send
socket
bind
accept
WSAStartup
WSACleanup

kernel32

OpenProcess
PeekNamedPipe
Process32First
LoadLibraryA
GlobalUnlock
GlobalLock
Process32Next
ReadFile
RtlZeroMemory
SetFilePointer
Sleep
TerminateProcess
lstrcpyA
lstrlenA
lstrcpynA
lstrcmpiA
lstrcatA
WriteFile
CloseHandle
CopyFileA
CreateFileA
CreatePipe
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
ExitThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
WinExec

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA

shell32

ShellExecuteA

wininet

InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetReadFile

iphlpapi

GetIpNetTable
GetTcpTable
GetUdpTable

Sections

.text
Size: 33KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84e5c2c438402f21450b771813b7c3cc

Headers

File Characteristics

Imports

user32

wsock32

kernel32

advapi32

shell32

wininet

iphlpapi

Sections

.text Size: 33KB - Virtual size: 46KB

.rdata Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 33KB - Virtual size: 46KB

.rdata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB