vsockapi[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

vsockapi.dll
Size

48KB
MD5

f2e1711c9587d1f9ee7c74e653e776b3
SHA1

5831d393359425f8c3afbfac826f621d3382c348
SHA256

d0e052f2810454dc7246f0a21b8502ca0f81c15918572a6c08db205e3da73151
SHA512

bb03d591923c9577d95cb186d259cc6bfdb95b22d702c5b168f5aa5ff18a3694f70a9443d97224a29941bf859038969e622bf18af061d77685f5202fea0f5e1f
SSDEEP

768:7kmQZHWF/cEt1GQbZ4YPGdc90oiB9H5/1A5oYLSR1juB:omYCGQCbc90XNKoL

Score

N/A

Malware Config

Signatures

Files

vsockapi.dll
.dll windows x86

b721497f576d707495b6850e9e689610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

vsapi

ord39
ord340
ord21
ord4
ord6
ord55
ord30
ord20
ord27
ord31
ord28
ord29
ord18
ord19
ord2
ord42
ord36
ord35

kernel32

GetEnvironmentStringsW
LCMapStringW
LCMapStringA
RtlUnwind
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
GetEnvironmentStrings
WideCharToMultiByte
CloseHandle
GetExitCodeProcess
OpenProcess
GetCurrentProcessId
GetLocalTime
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

wsock32

htons
shutdown
send
__WSAFDIsSet
getsockopt
accept
recv
gethostname
inet_addr
getsockname
getpeername
connect
inet_ntoa
select
gethostbyname
ioctlsocket
getservbyname
socket
WSACleanup
WSAStartup
ntohs
listen
bind
closesocket
setsockopt
WSAGetLastError

Exports

Exports

vsockapi_version
vssDecrypt
vssEncrypt
vssErrorMsg
vssExit
vssGetLocalSocketInfo
vssGetMyHostAddress
vssGetMyHostName
vssGetRemoteSocketInfo
vssInit
vssIsConnectionAlive
vssIsInit
vssIsSocketListening
vssSocketAcceptConn
vssSocketAcceptConn2
vssSocketClose
vssSocketOpen
vssSocketRecvToFile
vssSocketRecvToView
vssSocketRecvToZStr
vssSocketSend
vssSocketSendFile
vssSocketSendZ

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b721497f576d707495b6850e9e689610

Headers

File Characteristics

Imports

vsapi

kernel32

wsock32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 856B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 856B

.reloc
Size: 4KB - Virtual size: 1KB