98094bbff7530a11bbe612aaa61f8b5a70a01118cd5e1c6e5b9124126f3f290d

Sharing

Copy URL Twitter E-mail

General

Target

98094bbff7530a11bbe612aaa61f8b5a70a01118cd5e1c6e5b9124126f3f290d
Size

23KB
MD5

6fda5efcf83dc261de06de2d68dc844f
SHA1

1f89942f5ee55ee14a255ba0bd7fa925dd624022
SHA256

98094bbff7530a11bbe612aaa61f8b5a70a01118cd5e1c6e5b9124126f3f290d
SHA512

ea7745fe132eeeb280e721232ab6b501d559b3f4b371c9295490b161b2a4a9dac1072d6c5398250b51d55805036db3cb8e46394d8d9f6aecd45d0e12f1c068f7
SSDEEP

384:sLhZhpvcRIdNfQrBxfrCqOwzk3zJ1LL2GwctAorwms4A3mUA:wlpvcRySBhOwaN1L22km

Score

N/A

Malware Config

Signatures

Files

98094bbff7530a11bbe612aaa61f8b5a70a01118cd5e1c6e5b9124126f3f290d
.dll windows x86

8de3e1441ebd1f62c7af97d47c13cf1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
send
recv
socket
htons
ioctlsocket
connect
select
inet_addr
gethostname
gethostbyname
inet_ntoa
closesocket

kernel32

GetLastError
FindClose
FindNextFileA
lstrlenA
FileTimeToSystemTime
lstrcatA
FindFirstFileA
GetDiskFreeSpaceExA
GetDriveTypeA
RemoveDirectoryA
CopyFileA
CreateDirectoryA
GetVolumeInformationA
GetVersionExA
GlobalMemoryStatus
FreeLibrary
CloseHandle
TerminateProcess
WriteFile
ReadFile
Sleep
CreateProcessA
GetStartupInfoA
GetProcAddress
LoadLibraryA
ReleaseMutex
CreateMutexA
SetErrorMode
ExitProcess
TlsFree
GetSystemDirectoryA
TlsAlloc
GetModuleFileNameA
DisableThreadLibraryCalls
TlsSetValue
TlsGetValue

user32

wsprintfA

advapi32

StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

shell32

SHGetSpecialFolderPathA

msvcrt

_ltoa
_lseek
_filelength
_endthread
rename
_beginthreadex
atoi
free
_initterm
malloc
_adjust_fdiv
_strnicmp
_strlwr
_read
strncmp
sprintf
remove
strncpy
strstr
_itoa
strncat
_close
_write
_open
strtol

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8de3e1441ebd1f62c7af97d47c13cf1d

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

shell32

msvcrt

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB