9a46efaacc7020fd4b6ab57371035319ad6fe1586f1fc855c284a6f5ccb91664

Sharing

Copy URL Twitter E-mail

General

Target

9a46efaacc7020fd4b6ab57371035319ad6fe1586f1fc855c284a6f5ccb91664
Size

224KB
MD5

91a4e8f5caa08118f39d2d28470e9d8a
SHA1

dc83ad19f8674e33bc8640573425b2a02d0f71a0
SHA256

9a46efaacc7020fd4b6ab57371035319ad6fe1586f1fc855c284a6f5ccb91664
SHA512

f1ba736ec6c6cb9cd5d5bb7572fe548c7a785151eec69f5319f6cb62f0b3e7c90483f1564bba16dbe67505873b01aa4a28e24e1446073fcf4aee1bf36b5fddfa
SSDEEP

3072:Pb8RNdN5YN3qkajIoU6Ur1DqONxQSbKpWYMNxT0Nq+:Pq7IIUJDnOvM0

Score

N/A

Malware Config

Signatures

Files

9a46efaacc7020fd4b6ab57371035319ad6fe1586f1fc855c284a6f5ccb91664
.dll windows x86

a53ca6fb4460bbb6bd41c23642120841

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
lstrcatA
lstrcpyA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalUnlock
GlobalLock
GetProcAddress
lstrlenA
SetFilePointer
CreateFileA
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
MultiByteToWideChar
CreateFileMappingA
FreeLibrary
GetModuleHandleA
DisableThreadLibraryCalls
GetCurrentProcessId
GetModuleFileNameA
GlobalAlloc
VirtualProtect

user32

ShowWindow
GetWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindow
GetTopWindow
CallNextHookEx
GetKeyState
RegisterClassExA
GetClassNameA
GetWindowRect
SetParent
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDlgItemTextA
SendMessageA
GetDlgItem
MapWindowPoints
GetClassInfoExA
SetWindowPos
SetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
DestroyWindow
PostQuitMessage
GetWindowTextA
KillTimer
wsprintfA

comctl32

ord17

ws2_32

send

shlwapi

PathRemoveFileSpecA

msvcrt

free
atoi
strstr
sprintf
??2@YAPAXI@Z
malloc
_itoa
_adjust_fdiv
_initterm

Exports

Exports

JPSHT

Sections

.JPSHTEN
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text0
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a53ca6fb4460bbb6bd41c23642120841

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ws2_32

shlwapi

msvcrt

Exports

Exports

Sections

.JPSHTEN Size: 128KB - Virtual size: 125KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.text0 Size: 48KB - Virtual size: 46KB

.text1 Size: 4KB - Virtual size: 256B

.reloc Size: 28KB - Virtual size: 26KB

.JPSHTEN
Size: 128KB - Virtual size: 125KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB

.text0
Size: 48KB - Virtual size: 46KB

.text1
Size: 4KB - Virtual size: 256B

.reloc
Size: 28KB - Virtual size: 26KB