b21caa6d4ecdd143eb4cc93dad97d599854e1a585a6f27a645e827d44035060f

General

Target

b21caa6d4ecdd143eb4cc93dad97d599854e1a585a6f27a645e827d44035060f
Size

28KB
MD5

ab4ffe2e6d79eea81bd21c28ee600b47
SHA1

d362f4ac0970b8f53b6379a8a9c7532d6011d6ac
SHA256

b21caa6d4ecdd143eb4cc93dad97d599854e1a585a6f27a645e827d44035060f
SHA512

1491826501562bbbbcfaad57795fc58a06ca554f3bfadc9a1426ff69b72e2bf7cf791d1a38a51357497b5a9ab2349fefde9c4bca6cdb1fa8b6d6e4cb387bba77
SSDEEP

192:JFxEkPZCSQtU4HxZ2A70qL3GiqEJGt3+x7khG1z+xrIdWPa2Y:CMgnV2iK5+NkhG1+rIdWPZY

Score

N/A

Malware Config

Signatures

Files

b21caa6d4ecdd143eb4cc93dad97d599854e1a585a6f27a645e827d44035060f
.dll windows x86

6f9da90cc62d6a2beb14171e0de04391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
GetCurrentProcess
VirtualProtect
GetModuleHandleA
WideCharToMultiByte
GetTickCount
Sleep
ProcessIdToSessionId
OpenProcess
ResumeThread
GetModuleFileNameA
WriteProcessMemory
VirtualAllocEx
GetThreadContext
SuspendThread
OpenThread
CloseHandle
Thread32Next
Thread32First
GetLastError
CreateToolhelp32Snapshot
LoadLibraryA
GetProcAddress
SetThreadContext
TerminateThread

advapi32

IsTextUnicode

msvcrt

strrchr
sprintf
wcsncpy
free
fclose
fprintf
fopen
malloc
printf
strchr
strstr
_strlwr
_initterm
_adjust_fdiv
_beginthreadex
??2@YAPAXI@Z
_itoa

ws2_32

htons
WSACleanup
inet_addr
send
socket
recv
gethostbyname
inet_ntoa
connect
ioctlsocket
closesocket
WSAGetLastError
getsockname

dnsapi

DnsQuery_A

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9da90cc62d6a2beb14171e0de04391

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

ws2_32

dnsapi

psapi

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 4KB - Virtual size: 586B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 4KB - Virtual size: 586B