f3bc42e6f180403dfe6e80b0d57b54ead52469f980524f7fde07d3abba1d39fd

General

Target

f3bc42e6f180403dfe6e80b0d57b54ead52469f980524f7fde07d3abba1d39fd
Size

244KB
MD5

0375dc2a1c5b690a32193a3d53778dd1
SHA1

ce8bc8540510ff4845c1464ff7162b2b5ef63f0d
SHA256

f3bc42e6f180403dfe6e80b0d57b54ead52469f980524f7fde07d3abba1d39fd
SHA512

60f8d2cb65100b3dd6bddb7032140993c9b5e349c09409ab230b1e138b5660eda0ae8c5d9daacb2a09748d05eff1374dc701d7bb9d74bae4142e83f62cfda53a
SSDEEP

768:pX6bszMvp3XkCBRWsEBBQARQk8flWdaMN:puJ5RWsEBBQARMUaMN

Score

N/A

Malware Config

Signatures

Files

f3bc42e6f180403dfe6e80b0d57b54ead52469f980524f7fde07d3abba1d39fd
.dll windows x86

213411aa0dfc29375d0df43d24261aec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strstr
memcpy
memcmp
_snprintf
RtlZeroMemory
RtlUnwind
strlen

ws2_32

closesocket
gethostname

kernel32

WriteFile
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
IsBadReadPtr
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteFileA
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
MapViewOfFile
MoveFileExA
ReadFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtectEx
WideCharToMultiByte

user32

SetWindowsHookExA
wsprintfA
CallNextHookEx
FindWindowA
GetWindowThreadProcessId
KillTimer
RegisterWindowMessageA
SendMessageA
SetTimer
UnhookWindowsHookEx

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

Sections

.text
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

213411aa0dfc29375d0df43d24261aec

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

advapi32

Sections

.text Size: 228KB - Virtual size: 224KB

.bss Size: - Virtual size: 8B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 228KB - Virtual size: 224KB

.bss
Size: - Virtual size: 8B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB