33bd4e2feccd7744c16bdbd080d526061598df53567007087dcba0d8aafba3a7

General

Target

33bd4e2feccd7744c16bdbd080d526061598df53567007087dcba0d8aafba3a7
Size

44KB
MD5

5f1e8e10832a869e85abf6816ccf9b3c
SHA1

4b218a03794d8e155880634b770b8974123c1592
SHA256

33bd4e2feccd7744c16bdbd080d526061598df53567007087dcba0d8aafba3a7
SHA512

ef4153adf77ac49bdecb55f87a6a24177071622ff7d1b6b3c93e7a89a7b50af7842aadf02f4d05b27a108f7b83c4dfd2c03868c5a0df04b9d09bbb6b34648516
SSDEEP

384:fjdouVU+Wr82CWngKu66Pg59ZyE6JWw515ZWzEz4LJY037yzkfa:bdROo27gK8P+V6kW15wYzQf

Score

N/A

Malware Config

Signatures

Files

33bd4e2feccd7744c16bdbd080d526061598df53567007087dcba0d8aafba3a7
.dll windows x86

de7a8635bbca1ffe89141e351772296b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

msvcrt

_adjust_fdiv
malloc
_initterm
free
_beginthreadex
_except_handler3

kernel32

LoadResource
TlsSetValue
TlsGetValue
DisableThreadLibraryCalls
TlsAlloc
GetSystemDirectoryA
lstrcatA
LoadLibraryA
TlsFree
FreeLibrary
VirtualAlloc
ExitProcess
GetProcAddress
LockResource
SizeofResource
FindResourceA
Sleep
ExitThread
VirtualFree

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de7a8635bbca1ffe89141e351772296b

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.sdata Size: 4KB - Virtual size: 4B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 744B

.rsrc Size: 20KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 504B

.text
Size: 4KB - Virtual size: 2KB

.sdata
Size: 4KB - Virtual size: 4B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 744B

.rsrc
Size: 20KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 504B