9fff7f36d4d4ca91822c4c15834ca4ed4e00c14d207bb240fab2e523f9bd6f5b

Sharing

Copy URL Twitter E-mail

General

Target

9fff7f36d4d4ca91822c4c15834ca4ed4e00c14d207bb240fab2e523f9bd6f5b
Size

32KB
MD5

ab87823550ef0da5824ad17b237fb1dc
SHA1

cd4071b496bb3da8e0d935b1131f1f8048962ae0
SHA256

9fff7f36d4d4ca91822c4c15834ca4ed4e00c14d207bb240fab2e523f9bd6f5b
SHA512

a459c14faa03e4e6890c0432ffea9d1a5ea63759b83388ad38652ca6f331e3fbd9265d8a6da93fd383fa3c5c34365c38343754725d29d7c72e04f6b75e060430
SSDEEP

384:UtI2i+zI/VPM50230Ig46Hv+RL0AA1OH+WeNB+J1Qb1hRu:UtIbpNPSHSgL0AAaeNBoQb1m

Score

N/A

Malware Config

Signatures

Files

9fff7f36d4d4ca91822c4c15834ca4ed4e00c14d207bb240fab2e523f9bd6f5b
.exe windows x86

79342c95bea23d048d5edc53ecc5ad1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
LockResource
LoadResource
FindResourceA
SetPriorityClass
GetCurrentProcess
CreateMutexA
DeleteFileA
CopyFileA
GetModuleFileNameA
CreateProcessA
GlobalUnlock
lstrcpyA
GlobalSize
GlobalLock
OutputDebugStringA
GetTickCount
GlobalFree
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
GetLastError
CloseHandle
EnterCriticalSection
LeaveCriticalSection
Sleep
WaitForSingleObject
DeleteCriticalSection
GetSystemDirectoryA
InitializeCriticalSection

user32

ScreenToClient
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
MapVirtualKeyA
PtInRect
GetCursorPos
GetDC
IsIconic
IsWindowVisible
GetKeyState
ClientToScreen
GetSystemMetrics
mouse_event
SetCursorPos
FindWindowA
GetForegroundWindow
ReleaseDC

gdi32

CreateDIBSection
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC

ole32

CreateStreamOnHGlobal

gdiplus

GdipAlloc
GdipCreateBitmapFromGdiDib
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneImage
GdipFree
GdiplusStartup

msvcrt

__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_except_handler3
_controlfp
__p__fmode
_strnicmp
_exit
__CxxFrameHandler
wcscmp
malloc
free
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_beginthread

ws2_32

recv
send
htons
inet_addr
getpeername
socket
WSAStartup
WSACleanup
WSAGetLastError
closesocket
shutdown
connect

dnsapi

DnsQuery_A
DnsRecordListFree

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79342c95bea23d048d5edc53ecc5ad1f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

gdiplus

msvcrt

ws2_32

dnsapi

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 2KB