0469cdc87c475c16616265680c21dabe96b35aea89079c14379c730c8487e3e2

Sharing

Copy URL Twitter E-mail

General

Target

0469cdc87c475c16616265680c21dabe96b35aea89079c14379c730c8487e3e2
Size

995KB
MD5

e60ba1a96e73ab3170e2532e5ec29164
SHA1

6bb602c0afdd658ff446701ada1499a8c477c360
SHA256

0469cdc87c475c16616265680c21dabe96b35aea89079c14379c730c8487e3e2
SHA512

872e9d92a8a45ab4787bf824c242aed165efb3d5651fb213243151cb52d390576c4ce0f08c4ec0b11e21eda197edcb8d19a8273fb68914be598898c8d619cd9a
SSDEEP

24576:e5tgj6O0RUnUYMluwJs/MAEQGy/CgdyFA8MIdrwTBYKLxu5MGx0NAXpDueGbpw9H:MRRUnUYIuwJs/MAVGy/LdyFA8MIdrwTd

Score

1^/10

Malware Config

Signatures

Files

0469cdc87c475c16616265680c21dabe96b35aea89079c14379c730c8487e3e2
.dll windows x64

d6d63e2e890f133742fd2d365a0cff4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

accept
freeaddrinfo
getaddrinfo
WSAGetLastError
WSAStartup
socket
shutdown
setsockopt
send
select
recvfrom
recv
listen
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet

kernel32

LeaveCriticalSection
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
CreateFileW
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
VirtualAlloc
VirtualProtect
GetProcAddress
FindClose
FindFirstFileW
FindNextFileW
GetLastError
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
FindFirstFileExW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CloseHandle
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ReadFile
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx

Exports

Exports

AppOpen

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6d63e2e890f133742fd2d365a0cff4f

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 730KB - Virtual size: 730KB

.rdata Size: 153KB - Virtual size: 152KB

.data Size: 84KB - Virtual size: 97KB

.pdata Size: 22KB - Virtual size: 21KB

_RDATA Size: 512B - Virtual size: 244B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 730KB - Virtual size: 730KB

.rdata
Size: 153KB - Virtual size: 152KB

.data
Size: 84KB - Virtual size: 97KB

.pdata
Size: 22KB - Virtual size: 21KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 4KB - Virtual size: 3KB