579fa00bc212a3784d523f8ddd0cfc118f51ca926d8f7ea2eb6e27157ec61260[.]bin[.]sample (1)[.]gz

Sharing

Copy URL Twitter E-mail

General

Target

579fa00bc212a3784d523f8ddd0cfc118f51ca926d8f7ea2eb6e27157ec61260.bin.sample (1).gz
Size

350KB
MD5

31701b912629447f50f9a285eacf98f3
SHA1

8bfee3b7b802609e261f2e46265d34449f7f0fb2
SHA256

d95d1c5645d64497349cf1c7b696c7a2f4dcfb431afd383b1785571e45f33135
SHA512

6297a0c0b72f70c9a6adeb39227ce6a92532fbecd16333c42bf3e0ac905e9bf6a7db14b46049e2b369ab836e6212b585c2252e0039ad61c45cba73027d48f81d
SSDEEP

6144:MR20TlIHryeBYxmViTX3WAZdKIle9tfzIQVnCZcEcnIYoA:MRplMryUNOWYBlejb9VnCbgqA

Score

1^/10

Malware Config

Signatures

Files

579fa00bc212a3784d523f8ddd0cfc118f51ca926d8f7ea2eb6e27157ec61260.bin.sample (1).gz
.gz
sample
.dll windows x64

e6ed19a2525d5e6c3edb5f45414cf5ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSAIoctl
ioctlsocket
bind
listen
accept
getpeername
inet_ntoa
select
ntohs
__WSAFDIsSet
shutdown
setsockopt
recv
send
gethostname
WSAStartup
WSACleanup
closesocket
gethostbyname
connect
htons
inet_addr
socket

user32

GetMessageA
SetProcessWindowStation
OpenDesktopA
PostQuitMessage
CloseWindowStation
wsprintfA
CloseDesktop
TranslateMessage
OpenWindowStationA
CreateWindowExA
DefWindowProcA
SetThreadDesktop
DispatchMessageA
RegisterClassA
wsprintfW

kernel32

RemoveDirectoryW
FlushFileBuffers
WriteConsoleW
HeapReAlloc
LoadLibraryW
GetStringTypeW
HeapSize
LCMapStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
RtlUnwindEx
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
CreateFileA
SetFilePointer
WriteFile
CreateFileW
CloseHandle
Sleep
GetProcAddress
LoadLibraryA
ReadFile
GetLastError
VirtualFree
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
CreateEventA
ResetEvent
PeekNamedPipe
GetTickCount
CreatePipe
DeleteFileW
CreateProcessA
TerminateProcess
GetStartupInfoA
GetLocalTime
lstrcpynW
FileTimeToSystemTime
lstrcmpW
GetFileSizeEx
MoveFileW
FindClose
SetLastError
FileTimeToLocalFileTime
ProcessIdToSessionId
GetCurrentProcessId
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
HeapFree
HeapAlloc
GetCurrentThreadId
GetFileType
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree

shell32

SHGetFileInfoW

wtsapi32

WTSRegisterSessionNotification
WTSEnumerateSessionsA
WTSUnRegisterSessionNotification

ole32

CoCreateGuid

Exports

Exports

Start

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 322KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6ed19a2525d5e6c3edb5f45414cf5ee

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

user32

kernel32

shell32

wtsapi32

ole32

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 322KB - Virtual size: 459KB

.pdata Size: 7KB - Virtual size: 6KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 322KB - Virtual size: 459KB

.pdata
Size: 7KB - Virtual size: 6KB

.reloc
Size: 3KB - Virtual size: 3KB