fd9bf21b94fdc62b08bfeaa62595629f2b998f17ab18a3f0cd1e74c17edd4ec8

General

Target

fd9bf21b94fdc62b08bfeaa62595629f2b998f17ab18a3f0cd1e74c17edd4ec8
Size

37KB
MD5

61e2c8e1317c2a49ef9dda8a4777cf36
SHA1

7d7c60a0c002dfdfae5ab9eeaec930f8e6ea1185
SHA256

fd9bf21b94fdc62b08bfeaa62595629f2b998f17ab18a3f0cd1e74c17edd4ec8
SHA512

694f778559ffb5e75b82c1e37a28b973044893a12f1139b511b80bfc2eeb59120dd2f21fdb1093d4bbf58cd1778a62359b63b99ece42df5166cfa396474b608f
SSDEEP

768:L+BvO22t/eJff0gMCTkDlLEnDgoFLGslFG6yc:L6O2y/z/5CgonE6yc

Score

N/A

Malware Config

Signatures

Files

fd9bf21b94fdc62b08bfeaa62595629f2b998f17ab18a3f0cd1e74c17edd4ec8
.dll windows x86

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA

user32

GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect

advapi32

RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor

msvcrt

_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa

gdi32

GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode

shell32

ord680

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.reloc
Size: 3KB - Virtual size: 2KB