f33a1869ed090fde3d08668766368b617c23299b0d4132351276395defe9bed4

Sharing

Copy URL Twitter E-mail

General

Target

f33a1869ed090fde3d08668766368b617c23299b0d4132351276395defe9bed4
Size

161KB
MD5

339fcfd7c770b7d78e0566ea9051e0a3
SHA1

b4f78829449377f1bc6f4fb628ca5a62950b13e7
SHA256

f33a1869ed090fde3d08668766368b617c23299b0d4132351276395defe9bed4
SHA512

36bbae592903711f91999b0fdbb6fece846b13d6660be1b7cfa60ee756fc253661a4b90a2949c57016d2c6602262157ebc47258b3e893827f85b3f4f94751fe7
SSDEEP

1536:DfGCx98H+T2ynjsS75ZN9xs8OhmAPc7U6rgeEGfVFCMa90yzJ6hywhvMLP/wOA91:D+Clh4S5ZW806Hf5yzbw52Hw/Pr

Score

N/A

Malware Config

Signatures

Files

f33a1869ed090fde3d08668766368b617c23299b0d4132351276395defe9bed4
.exe windows x86

1fdd1abab5dd8e62c22b1f4cdba2ff01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
CreatePipe
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
CreateThread
GetStdHandle
FreeConsole
SetEndOfFile
CreateFileA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
GetStringTypeW
LCMapStringW
HeapSize
SetFilePointer
WriteConsoleW
HeapReAlloc
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
Beep
RtlUnwind
InterlockedExchange
GetCommandLineA
HeapSetInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
HeapDestroy
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
IsProcessorFeaturePresent
SetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap

wsock32

__WSAFDIsSet
select
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
getservbyport
ntohs
getservbyname
ioctlsocket
gethostbyname
inet_addr
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
shutdown
closesocket
recv
send

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fdd1abab5dd8e62c22b1f4cdba2ff01

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 5KB