b4c85ad4e17025adaeefa16d0cac893500693be2044d090b638de8e6ea60f3be

Sharing

Copy URL Twitter E-mail

General

Target

b4c85ad4e17025adaeefa16d0cac893500693be2044d090b638de8e6ea60f3be
Size

209KB
MD5

44a80e5393ba239e30115bac7f2a49f9
SHA1

90b4c075da6f4270c1a69783e733961dfb4427cd
SHA256

b4c85ad4e17025adaeefa16d0cac893500693be2044d090b638de8e6ea60f3be
SHA512

c47aa1d0c2d759566a097d1e63edbc434f82f6d153b47be9cd7b22d8ffb2c36694c25a74c3b32bec8237a49dd53d7beccaaffd4666b381980c6f43d6cc704137
SSDEEP

6144:OWwZ66XgY8dE+x4MSwlHQ5VLThEIS5M+LFM7EvBgEIO:TxDY8d1zSqHILAlxMYBj

Score

N/A

Malware Config

Signatures

Files

b4c85ad4e17025adaeefa16d0cac893500693be2044d090b638de8e6ea60f3be
.exe windows x86

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
lstrlenW
MulDiv
GetVersionExW
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
lstrcpynW
IsBadCodePtr
GlobalHandle
GetACP
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryW
InterlockedExchange
WaitForMultipleObjects
HeapFree
ReleaseSemaphore
GetFileSize
GlobalFree
lstrcpyA
GetQueuedCompletionStatus
SetUnhandledExceptionFilter
SetEndOfFile
InterlockedDecrement
GetTickCount
GetThreadPriority
lstrlenA
GetSystemTimeAsFileTime
GetFullPathNameW
lstrcmpW
CreateEventW
SetEvent
SetThreadPriority
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSection
GetCurrentThread
ReadFile
ResetEvent
VirtualFree
GlobalAlloc
GetFileAttributesW
GlobalLock
InterlockedIncrement
WaitForSingleObject
GetLastError
SetFilePointer
WideCharToMultiByte
GetSystemInfo
WriteFile
CreateThread
CreateSemaphoreW
GetProcessHeap
FreeLibrary
lstrcmpiW
GetCurrentProcess
GetPrivateProfileStringW
GetDiskFreeSpaceW
IsBadWritePtr
DeleteCriticalSection
LeaveCriticalSection
CreateFileW
GetCurrentProcessId
IsBadReadPtr
HeapAlloc
lstrcpyW
GetEnvironmentStringsW
GetProfileIntA

user32

GetDlgItem
TranslateMessage
DispatchMessageW
SetDlgItemTextW
SetCursor
GetDesktopWindow
IsWindow
DestroyWindow
GetDC
ReleaseDC
CheckRadioButton
SetDlgItemInt
LoadCursorW
LoadStringW
GetWindowLongW
GetDlgItemInt
DefWindowProcW
EnableWindow
SendMessageW
CheckDlgButton
IsRectEmpty
ClientToScreen
InvalidateRect
PeekMessageW
MoveWindow
SetWindowLongW
ShowWindow
IsWindowVisible
GetClientRect
GetWindowRect
GetAsyncKeyState
CreateDialogParamW

netshell

StartNCW
NcIsValidConnectionName
DllGetClassObject

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

Imports

kernel32

user32

netshell

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 41KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 41KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB