5a36b9e65a27650fa4a109fd540ed1f10fb527bccee0e2bf2f670ac88e9a5b82

Sharing

Copy URL Twitter E-mail

General

Target

5a36b9e65a27650fa4a109fd540ed1f10fb527bccee0e2bf2f670ac88e9a5b82
Size

212KB
MD5

45d2f5dc6d0b3c4adf2f3a00fc5474fb
SHA1

7997825d3ccafe632ce6b99c42fce7265b549acd
SHA256

5a36b9e65a27650fa4a109fd540ed1f10fb527bccee0e2bf2f670ac88e9a5b82
SHA512

ccebd5e92c7bbd0b8a908d3ff28a3bd8f81581e173a877ec93f93cad9d1ca018b0eccd39e983093cba6a7ef685f84c705a9365268bfb20eef98a026c0602b982
SSDEEP

6144:s2GiWgboJfqE0e/8XUZiaR9re8l9+/BHUzVSdf:suyV0e0XUZtLM5HUz0

Score

N/A

Malware Config

Signatures

Files

5a36b9e65a27650fa4a109fd540ed1f10fb527bccee0e2bf2f670ac88e9a5b82
.exe windows x86

d49ea5a582015b08a74b1ff0475064b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetCurrentProcess
IsBadReadPtr
GetEnvironmentStringsW
GetPrivateProfileStringW
lstrcmpW
ReleaseSemaphore
GetQueuedCompletionStatus
SetEvent
GetFullPathNameW
SetEndOfFile
CloseHandle
InterlockedExchange
IsBadWritePtr
HeapFree
GetProcessHeap
MultiByteToWideChar
lstrcmpiW
WaitForMultipleObjects
ResetEvent
GetDiskFreeSpaceW
GetACP
GetCurrentProcessId
GetFileSize
lstrlenW
HeapAlloc
GlobalFree
GetModuleFileNameA
GetVersionExW
lstrcpyW
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThread
GetSystemTimeAsFileTime
GetProfileIntA
GetSystemInfo
SetFilePointer
GetThreadPriority
QueryPerformanceCounter
GetFileAttributesW
GetLastError
FreeLibrary
GlobalHandle
CreateEventW
InterlockedDecrement
ReadFile
WaitForSingleObject
SetUnhandledExceptionFilter
VirtualFree
CreateFileW
LeaveCriticalSection
MulDiv
CreateSemaphoreW
lstrcpynW
WideCharToMultiByte
CreateThread
EnterCriticalSection
GlobalLock
WriteFile
lstrcpyA
LoadLibraryW
GlobalMemoryStatus
InterlockedIncrement
IsBadCodePtr
GetTickCount
GlobalUnlock
SetThreadPriority

user32

SetCursor
SendMessageW
LoadStringW
GetDlgItem
DestroyWindow
GetDesktopWindow
LoadCursorW
MoveWindow
SetDlgItemInt
GetAsyncKeyState
GetDC
TranslateMessage
IsRectEmpty
CheckRadioButton
ShowWindow
SetWindowLongW
IsWindow
CheckDlgButton
GetClientRect
GetWindowLongW
EnableWindow
DispatchMessageW
InvalidateRect
GetDlgItemInt
GetWindowRect
DefWindowProcW
IsWindowVisible
ClientToScreen
SetDlgItemTextW
PeekMessageW
ReleaseDC
CreateDialogParamW

netshell

StartNCW
NcIsValidConnectionName
DllGetClassObject

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d49ea5a582015b08a74b1ff0475064b1

Headers

File Characteristics

Imports

kernel32

user32

netshell

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 43KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 43KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB