68729308112ffdf95e0c2b0ae69ee7283e4f14bd1f1fd3a4dccf69df8f3d6c41

Sharing

Copy URL Twitter E-mail

General

Target

68729308112ffdf95e0c2b0ae69ee7283e4f14bd1f1fd3a4dccf69df8f3d6c41
Size

38KB
MD5

49c206841f99d6f317ae5bc82e05e3c6
SHA1

58f99a564452892ba5dd488b46710fc48c4fb852
SHA256

68729308112ffdf95e0c2b0ae69ee7283e4f14bd1f1fd3a4dccf69df8f3d6c41
SHA512

8c41950ee61080419e41112596ff3baa3a47af2c289ae196d4b6d03533489040fdf881a0ea36c15999e648ab9ca8ae36a5f71f3dbf1f853936eb2444ae643fdc
SSDEEP

384:K5AUL1RjJEh46webJ39qV8I+vrJ9CZmWE/ZOK6/ewjQYRYb0B9tq6NMCNhfR:K5J/F5cvIwJYRsOK2TtSb0XH

Score

N/A

Malware Config

Signatures

Files

68729308112ffdf95e0c2b0ae69ee7283e4f14bd1f1fd3a4dccf69df8f3d6c41
.dll windows x86

2587344aa5dcd781462dd03ff2333be4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
CreateFileA
SetFilePointer
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpynA
GetModuleFileNameA
FreeLibrary
ReadFile
WideCharToMultiByte
VirtualQueryEx
ReadProcessMemory
GetFileAttributesW
CloseHandle
GetTempPathA
DeleteFileA
Sleep
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
IsBadReadPtr
lstrlenA
GetProcAddress
LoadLibraryA

user32

GetDC
GetWindowRect
wvsprintfA
GetWindowTextA
FindWindowA
wsprintfA
GetWindow
GetClassNameW

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash

msvcrt

_strupr
free
strcpy
memset
malloc
strcat
sprintf
strlen
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
fclose
ftell
fseek
fopen
mbstowcs
_except_handler3
memmove
memcpy
strchr
strstr
isprint
rand
srand
time
wcslen
wcsncat
wcscpy
wcsstr
strncpy
_stricmp
strrchr
exit
printf
__CxxFrameHandler
strcmp
_vsnprintf
realloc
isdigit
isalpha
atoi
_strcmpi
_strdup

wininet

InternetCloseHandle

wsock32

WSAStartup
socket
htons
recv
closesocket
send
gethostbyname
connect

gdi32

DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2587344aa5dcd781462dd03ff2333be4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

wsock32

gdi32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 5.0MB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 5.0MB

.reloc
Size: 10KB - Virtual size: 10KB