e732d4eac01e6d955e9df066894ab7dd7096679bdfc5be67bce12843633cebf8

General

Target

e732d4eac01e6d955e9df066894ab7dd7096679bdfc5be67bce12843633cebf8
Size

27KB
MD5

d70de7cfd9cb6f135a7d4c0823ec88e0
SHA1

b2e71ca661e19b256dd92db34ea81f055276815a
SHA256

e732d4eac01e6d955e9df066894ab7dd7096679bdfc5be67bce12843633cebf8
SHA512

09a56eaf38b443096914d913169b83082169c2d38ceca4093e1df54bb049ff4cff05cb2fe864867599736a8bda408edbdae20d07cdef8ce966ebae96604a2d77
SSDEEP

384:1/yASy0m2N4tlJQNPi20Q/IdPc8zuP1XUSHVqmTbDOJBpbmXwkIvuwHjCYe:S0lJwPi5Q/IVZuiSHVqmiVmf2e

Score

N/A

Malware Config

Signatures

Files

e732d4eac01e6d955e9df066894ab7dd7096679bdfc5be67bce12843633cebf8
.dll windows x86

f70edadfcb080d96dd06f9e9b1542b6f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwSetInformationFile
ZwOpenProcessToken
ZwQueryInformationToken
memcpy
ZwWriteFile
RtlIpv4StringToAddressW
RtlIpv4AddressToStringA
RtlNtStatusToDosError
ZwCreateFile
RtlAdjustPrivilege
RtlFreeUnicodeString
wcschr
ZwQueryInformationFile
ZwOpenFile
RtlDosPathNameToNtPathName_U
LdrFindEntryForAddress
ZwLoadDriver
wcslen
ZwSetValueKey
RtlInitUnicodeString
ZwCreateKey
swprintf
ZwClose
ZwDeleteKey
RtlPrefixUnicodeString
RtlGetCurrentPeb
strchr
memcmp
sprintf
strcpy
strcmp
strlen
qsort
RtlComputeCrc32
memset
RtlCreateUserThread
LdrAddRefDll
ZwReadFile
ZwDeleteFile
ZwEnumerateKey
ZwOpenKey
ZwQueryValueKey
RtlImageNtHeader

kernel32

CreateProcessW
LocalFree
VirtualAlloc
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetSystemTimeAsFileTime
GetLastError
BindIoCompletionCallback
LocalAlloc
FreeLibraryAndExitThread
GetVersion
ExitThread
Sleep
VirtualFree
GetTickCount

ws2_32

WSASendTo
setsockopt
WSASend
WSARecv
WSAIoctl
bind
closesocket
WSAGetLastError
WSASocketW
WSACleanup
WSAStartup
WSARecvFrom

shell32

ShellExecuteExW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f70edadfcb080d96dd06f9e9b1542b6f

Headers

File Characteristics

Imports

ntdll

kernel32

ws2_32

shell32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 742B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 742B