PB_SendUdpPacket
Static task
static1
General
-
Target
nfs.exe
-
Size
16.9MB
-
MD5
6b504ada53b8e23dc498b3b793663114
-
SHA1
6adda890e2d984761e281964ad1f15b9ba6952f4
-
SHA256
77db854813a405697926d888cc170127ef1a69086f3bb63787ff782e13e8b777
-
SHA512
9da898960c4c88fbb162a46e398d1c21396e72658165862355d6377e44e284c0fa0fc8df82abd37aba559ae3be91f90df792dca7dfad957152bb224fb5f4f6c8
-
SSDEEP
393216:AmLapiadtvkG1ZGdRESxscuFIvc+Fohegi7w:AmL2d20IvwhegE
Malware Config
Signatures
Files
-
nfs.exe.exe windows x86
e50441048937d9163502b630f327f5a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SuspendThread
ResumeThread
GetVersionExA
GetLongPathNameA
GetDriveTypeA
GetLogicalDrives
FindClose
FindNextFileA
FindFirstFileA
FreeLibrary
CreateDirectoryA
GetModuleHandleA
GetSystemInfo
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
SetErrorMode
GetTickCount
CreateWaitableTimerA
GetSystemTime
SystemTimeToFileTime
SetWaitableTimer
GetDiskFreeSpaceExA
SetThreadPriority
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateEventA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetProcAddress
GetSystemDirectoryA
CreateThread
LeaveCriticalSection
TryEnterCriticalSection
SetEvent
CloseHandle
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DuplicateHandle
GetCurrentThread
TerminateThread
SleepEx
GetThreadPriority
GetExitCodeThread
WriteFile
SetFilePointer
DeleteFileA
MoveFileA
ReadFile
GetFileSize
CreateFileA
ResetEvent
GetCurrentDirectoryA
LoadLibraryA
OutputDebugStringA
WaitForSingleObject
GetCurrentThreadId
PulseEvent
GetPriorityClass
SetPriorityClass
RemoveDirectoryW
CreateDirectoryW
FindNextFileW
FindFirstFileW
WideCharToMultiByte
MoveFileW
DeleteFileW
SetEndOfFile
CreateFileW
QueryPerformanceCounter
GetLastError
QueryPerformanceFrequency
IsDebuggerPresent
IsBadReadPtr
InterlockedExchange
GetFileSizeEx
SetFilePointerEx
RaiseException
ReleaseSemaphore
InterlockedDecrement
CreateSemaphoreA
InterlockedExchangeAdd
SetThreadIdealProcessor
TlsGetValue
TlsSetValue
TlsAlloc
ReleaseMutex
CreateMutexA
VirtualProtect
d3d9
Direct3DCreate9
d3dx9_34
D3DXCreateEffectFromResourceA
D3DXMatrixMultiplyTranspose
D3DXCreateEffectPool
D3DXSaveSurfaceToFileA
D3DXGetVertexShaderProfile
D3DXGetPixelShaderProfile
D3DXVec3Transform
D3DXVec4Transform
D3DXMatrixMultiply
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemory
D3DXSaveSurfaceToFileInMemory
D3DXMatrixTranspose
D3DXMatrixInverse
dinput8
DirectInput8Create
user32
DispatchMessageA
TranslateMessage
GetMessageA
ShowCursor
PeekMessageA
GetClientRect
SetWindowLongA
SendInput
DestroyWindow
ReleaseCapture
SetCapture
EndPaint
SystemParametersInfoA
EnumDisplaySettingsA
MapVirtualKeyA
ToUnicode
PostQuitMessage
IsIconic
GetForegroundWindow
BeginPaint
MessageBoxA
wvsprintfA
GetCursorPos
LoadIconA
LoadCursorA
RegisterClassExA
AdjustWindowRect
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
GetWindowRect
ShowWindow
GetWindowLongA
DefWindowProcA
PostMessageA
GetKeyState
MapVirtualKeyExA
GetKeyboardLayout
GetDesktopWindow
advapi32
CheckTokenMembership
FreeSid
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
AllocateAndInitializeSid
shfolder
SHGetFolderPathA
ws2_32
inet_addr
htons
WSACleanup
WSAStartup
htonl
WSACreateEvent
shutdown
WSACloseEvent
WSASetEvent
WSARecv
WSARecvFrom
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetOverlappedResult
bind
accept
sendto
recvfrom
getpeername
getsockname
gethostname
WSAIoctl
ntohs
ntohl
WSAGetLastError
gethostbyname
inet_ntoa
getservbyname
gethostbyaddr
getservbyport
closesocket
select
send
recv
connect
getsockopt
setsockopt
ioctlsocket
socket
rpcrt4
RpcStringFreeA
UuidToStringA
ole32
CoCreateGuid
msvcr80
_endthreadex
_beginthreadex
bsearch
_vsnwprintf
getenv
_findclose
_findnext64i32
memmove_s
_invalid_parameter_noinfo
memmove
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_purecall
printf
_findfirst64i32
malloc
atoi
strrchr
isspace
strstr
strncat
strchr
atof
strncpy
sscanf
sprintf
qsort
ceil
vsprintf
_isnan
exit
_exit
_stricmp
rand
_CIsqrt
__CxxFrameHandler3
memset
memcpy
_CIfmod
_CIpow
_CIsin
tolower
_CxxThrowException
_CIacos
_CIatan2
_CIcos
__iob_func
strncmp
fclose
fopen
_CIexp
floor
_CIasin
longjmp
_setjmp3
strcspn
strcoll
fprintf
_mktime64
isprint
_CIlog
fwrite
_getcwd
__RTDynamicCast
toupper
fseek
_chmod
rename
remove
_ftime64
_time64
strtok
_strnicmp
_mkdir
_ltoa
strlen
memcmp
_snprintf
_vsnprintf
cos
sqrt
fflush
srand
strcpy
calloc
strcmp
strtoul
strcat
raise
realloc
abs
clock
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_localtime32
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_difftime64
strpbrk
asctime
_mkgmtime64
_gmtime64
_localtime64
_getdiskfree
_getdrive
_fullpath
_close
_write
?_open@@YAHPBDHH@Z
_lseek
_read
_filelength
_rmdir
isdigit
_CIlog10
_CItan
ldexp
_except_handler3
_aligned_malloc
_aligned_free
_control87
strtol
_CItanh
_CIsinh
_CIcosh
free
_CIatan
msvcp80
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
dsound
ord1
winmm
timeBeginPeriod
timeGetTime
timeEndPeriod
netapi32
Netbios
Exports
Exports
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 872KB - Virtual size: 871KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 376KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 868KB - Virtual size: 865KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
diabolus Size: 9.6MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE