36f48499a7b039768d5afdb4819d0cde

Sharing

Copy URL

Twitter E-mail

General

Target

36f48499a7b039768d5afdb4819d0cde
Size

284KB
MD5

36f48499a7b039768d5afdb4819d0cde
SHA1

c2ad8697567899857c631d78f95578f93fefe4dc
SHA256

51bc417e7dcc2d2b53578a820b6d977c1316cdbdc0c9e7c6650655406e327742
SHA512

a71cd70bd2a0507db1cabd1b190549b9e0b3dd02ff0d1243249c448e80c5d0e4d632d87b88ec5dfaf77e04379868119e456883ee93565f8e0f57e51e324b71e4
SSDEEP

3072:sReF9UKI5zHL1x5644lcbUzRBFpinNc0HhtyX3APG3ReJXXtvEz5FhTtt9IxY:4W9Aj/lWdBninX3yXQPGheJZMJt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f48499a7b039768d5afdb4819d0cde

Files

36f48499a7b039768d5afdb4819d0cde
.dll windows:5 windows x86 arch:x86

5bcdfba6661a20aa70dbcf4da35cdd97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

ws2_32

WSAAsyncSelect

Exports

Exports

WSAAccept
WSAAsyncSelect
WSACleanup
WSAConnect
WSACreateEvent
WSAEventSelect
WSAGetLastError
WSAHtonl
WSAHtons
WSAIoctl
WSAIsBlocking
WSANtohl
WSANtohs
WSARecv
WSARecvDisconnect
WSARecvFrom
WSAResetEvent
WSASend
WSASendDisconnect
WSASendTo
WSASetEvent
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getprotobyname
getprotobynumber
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.agp1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.agp0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.agp2
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.agp3
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bcdfba6661a20aa70dbcf4da35cdd97

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 13KB

.agp1 Size: 2KB - Virtual size: 2KB

.agp0 Size: 4KB - Virtual size: 4KB

.agp2 Size: 135KB - Virtual size: 135KB

.tls Size: 512B - Virtual size: 24B

.agp3 Size: 48KB - Virtual size: 48KB

.reloc Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 13KB

.agp1
Size: 2KB - Virtual size: 2KB

.agp0
Size: 4KB - Virtual size: 4KB

.agp2
Size: 135KB - Virtual size: 135KB

.tls
Size: 512B - Virtual size: 24B

.agp3
Size: 48KB - Virtual size: 48KB

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB