8e05559746d08bfd53ff040e889aa4ac

Sharing

Copy URL

Twitter E-mail

General

Target

8e05559746d08bfd53ff040e889aa4ac
Size

3.6MB
MD5

8e05559746d08bfd53ff040e889aa4ac
SHA1

a62393e0069afe2744b08fddcc2355cebfa76483
SHA256

05e03d30dcdd36546bf975c6354f5692ca7a76edde5fcd923a0d24bb2f769579
SHA512

b231d31c204513516eddb9df895b6538139b8a5a44f63d6879e54a7bd85319a26bd5870894cd98487891bee6eaf10272a9903b7a0fb53b9c3accb405f8a4a61d
SSDEEP

49152:B8BZx2g7wSV6xjZMGEwUouoA/2kt/JjMfawu80hv56aw56nYI4FfLXJX+fTAab4s:BUGguj2LouoA/zJMVoHf4/+bdb4Fy

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/生成器-收费版/dat/windows
unpack001/生成器-收费版/台风DDOS-VIP版生成器.exe

Files

8e05559746d08bfd53ff040e889aa4ac
.rar
生成器-收费版/dat/Linux2.4
.elf linux x86
生成器-收费版/dat/Linux2.6
.elf linux x86
生成器-收费版/dat/linux-arm
.elf linux arm
生成器-收费版/dat/linux-mips
.elf linux mipsel
生成器-收费版/dat/windows
.exe windows:4 windows x86 arch:x86

3ad350f14c2e450686dbd3fbcbe807a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CreateMutexA
SetThreadPriority
GetLastError
SetFileAttributesA
CopyFileA
GetModuleHandleA
GetTickCount
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringW
ResumeThread
GetSystemDirectoryA
CreateProcessA
OpenProcess
WaitForSingleObject
GetSystemInfo
LoadLibraryA
GetProcAddress
GlobalMemoryStatus
CreateThread
CloseHandle
ExitThread
lstrlenA
Sleep
CompareStringA
GetFileAttributesA
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RaiseException
SetFilePointer
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
ExitProcess
TerminateProcess
DuplicateHandle
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
CreatePipe
GetExitCodeProcess
HeapReAlloc
HeapSize
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc

user32

wsprintfA

comdlg32

GetFileTitleA

advapi32

CreateServiceA
OpenServiceA
StartServiceA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA

ws2_32

WSAGetLastError
gethostname
select
__WSAFDIsSet
recv
WSAIoctl
connect
send
socket
WSAStartup
inet_ntoa
setsockopt
sendto
closesocket
WSACleanup
ntohl
htons
inet_addr
gethostbyname
WSASocketA

iphlpapi

GetIfTable

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 9.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
生成器-收费版/dat/wrt-mips
.elf linux mipsbe
生成器-收费版/台风DDOS-VIP版生成器.exe
.exe windows:5 windows x86 arch:x86

85a64973c480312f01872eca1b7765f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime

user32

LoadAcceleratorsA

gdi32

SetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegDeleteValueA

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA

oledlg

ord8

ole32

OleInitialize

oleaut32

VarBstrFromDate

ws2_32

inet_addr

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 321KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ad350f14c2e450686dbd3fbcbe807a6

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ws2_32

iphlpapi

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 84KB - Virtual size: 9.2MB

85a64973c480312f01872eca1b7765f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

msvcrt

iphlpapi

psapi

Sections

.text Size: 321KB - Virtual size: 648KB

.sedata Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 1024B - Virtual size: 4KB

.rsrc Size: 14KB - Virtual size: 16KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 84KB - Virtual size: 9.2MB

.text
Size: 321KB - Virtual size: 648KB

.sedata
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 14KB - Virtual size: 16KB

.sedata
Size: 4KB - Virtual size: 4KB