2c0e40edb4fa34c0cbb8fc641e0a049f602ae9e66a1c6e781c1fcb8210e0157d

General

Target

2c0e40edb4fa34c0cbb8fc641e0a049f602ae9e66a1c6e781c1fcb8210e0157d
Size

248KB
MD5

5357d081348c110d0b0f8c5c0d1b418f
SHA1

b552061f442487f01e61b34666012c54ae52bca0
SHA256

2c0e40edb4fa34c0cbb8fc641e0a049f602ae9e66a1c6e781c1fcb8210e0157d
SHA512

de615d1ddedb3ffad539f12e9f69d1c1edbcc0086745df671662f5c6a765eac6cd44fd795f03c67f554f127a629d23da692a2eaab433db384d670a0a3b3e792d
SSDEEP

768:sBzsSTwKg9Q0/03m7VGwtC7K4HLAbFlGswuzf8+Tp/VFNABBQARQkZMuRKX:slsSkKg9fuRorPp/VFNABBQARrKX

Score

N/A

Malware Config

Signatures

Files

2c0e40edb4fa34c0cbb8fc641e0a049f602ae9e66a1c6e781c1fcb8210e0157d
.dll windows x86

16d72113f1345aa603f7d6edebac4320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
RtlZeroMemory
_snprintf
_strupr
ZwQuerySystemInformation
memcmp
memcpy
strlen
strstr

kernel32

GetCurrentProcessId
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TerminateThread
VirtualProtect
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
ExitProcess
IsBadReadPtr
WritePrivateProfileStringA
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteFileA
UnmapViewOfFile
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetTempFileNameA
GetTempPathA
MapViewOfFile
MoveFileExA
OpenThread
ReadFile
SuspendThread

user32

wsprintfA
UnhookWindowsHookEx
SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
GetWindowThreadProcessId

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16d72113f1345aa603f7d6edebac4320

Headers

File Characteristics

Imports

ntdll

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 28KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 204KB - Virtual size: 202KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 204KB - Virtual size: 202KB

.reloc
Size: 4KB - Virtual size: 1KB