7e28769ff3b563285db508a963e93ce738182a0d5b97567490c892365557fb51

General

Target

7e28769ff3b563285db508a963e93ce738182a0d5b97567490c892365557fb51
Size

11KB
MD5

38865be6ef5b7ac62514f65541476208
SHA1

9a1fccc622bae90366a71c3eb5e56ccb0cc8aa77
SHA256

7e28769ff3b563285db508a963e93ce738182a0d5b97567490c892365557fb51
SHA512

6a318ff823bdb44d3bfe6fcae8b3b5047f2615c8ae22d82b2c37a9dfcc5baf92a4745fb783b5ac0edf845a05cb9f856b497ee8183111ef78f646da02eab60ae6
SSDEEP

96:D+GZdLmJOGtHgSYn+B9ojgDEAhDBrlVn5t8hkkytMVXkkTgdlwwuISjN/uGolXWa:h9mJOuE+eYDBpCOxMqMcwwjSq

Score

N/A

Malware Config

Signatures

Files

7e28769ff3b563285db508a963e93ce738182a0d5b97567490c892365557fb51
.exe windows x86

131a5e2af9a9acdd7222936042121773

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
Sleep
WriteFile
CreateFileA
GetLastError
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageA
ResetEvent
LocalFree
SetLastError
GetOverlappedResult
WaitForSingleObject
ReadFile

crtdll

puts
__GetMainArgs
_amsg_exit
exit
fflush
sprintf
strtoul
strtok
fputs
_iob
printf
??2@YAPAXI@Z
wcstoul
??3@YAXPAX@Z
fprintf

wsock32

htons
getservbyname
ioctlsocket
gethostbyname
socket
connect
WSAGetLastError
closesocket
WSAStartup
WSASetLastError

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

CharToOemA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

131a5e2af9a9acdd7222936042121773

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crtdll

wsock32

version

user32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 610B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 610B