fa87e4cb391d5c5f9ae85cf29fe878e099dd58bce3621d6d5379c7fe0d68026c

Sharing

Copy URL Twitter E-mail

General

Target

fa87e4cb391d5c5f9ae85cf29fe878e099dd58bce3621d6d5379c7fe0d68026c
Size

83KB
MD5

5934f180ae49f4e8a611836a58c32b21
SHA1

0ef352ff6708f4507b84aac0f6f9a42d2dea87ba
SHA256

fa87e4cb391d5c5f9ae85cf29fe878e099dd58bce3621d6d5379c7fe0d68026c
SHA512

a8f4e8ebb4ba6437b1002f0f0f5c5db00b9bb7c99739e1e3f1be7156f7d1126a35aeee1b04a02023877ab21a1f1afc92236d6b6f22556861c5cd31a1dbed4ab7
SSDEEP

1536:JZXsvUp2/KR+KHZxnIzxqtVVHn6sI0FfQLMIObt6oem7M0ySiZJ19zCyvGq2KZ:JIUkK5LnI9q1aL0Fzt6oeeySG0aUs

Score

N/A

Malware Config

Signatures

Files

fa87e4cb391d5c5f9ae85cf29fe878e099dd58bce3621d6d5379c7fe0d68026c
.dll windows x86

93d80997309f0a36c3f63a5d8a3eca20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControls

kernel32

AddAtomA
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
FileTimeToSystemTime
FindAtomA
FlushInstructionCache
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetShortPathNameA
GetSystemDirectoryA
HeapAlloc
HeapFree
InterlockedIncrement
IsBadCodePtr
MultiByteToWideChar
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msvcrt

__dllonexit
_assert
_controlfp
_errno
_iob
_snwprintf
abort
ceil
exit
fflush
floor
fprintf
free
gmtime
isupper
localtime
malloc
memcpy
memset
mktime
realloc
strlen
strtod
tolower
wcschr
wcscpy
wcslen

ole32

CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoGetObject
CoInitialize
CoUninitialize

oleaut32

GetActiveObject
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantChangeType
VariantClear
VariantInit

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA

user32

CreateWindowExA
DialogBoxParamA
DispatchMessageA
EnableWindow
FindWindowA
FindWindowExA
GetClassInfoA
GetClassNameA
GetDlgItem
GetWindowTextA
GetWindowThreadProcessId
LoadIconA
MessageBoxA
MessageBoxW
PeekMessageA
PostMessageA
RegisterClassA
SendMessageA
SetTimer
SetWindowTextA
ShowWindow
TranslateMessage

ws2_32

send

Exports

Exports

Exports

Sections

.text
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZP0
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ZP1
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

ZP2
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93d80997309f0a36c3f63a5d8a3eca20

Headers

File Characteristics

Imports

comctl32

kernel32

msvcrt

ole32

oleaut32

shell32

user32

ws2_32

Exports

Exports

Sections

.text Size: - Virtual size: 27KB

.data Size: - Virtual size: 1KB

.rdata Size: - Virtual size: 480B

.bss Size: - Virtual size: 21KB

.edata Size: - Virtual size: 68B

.idata Size: - Virtual size: 3KB

.rsrc Size: 6KB - Virtual size: 5KB

ZP0 Size: - Virtual size: 1KB

ZP1 Size: - Virtual size: 19KB

ZP2 Size: 75KB - Virtual size: 75KB

.reloc Size: 512B - Virtual size: 184B

.text
Size: - Virtual size: 27KB

.data
Size: - Virtual size: 1KB

.rdata
Size: - Virtual size: 480B

.bss
Size: - Virtual size: 21KB

.edata
Size: - Virtual size: 68B

.idata
Size: - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 5KB

ZP0
Size: - Virtual size: 1KB

ZP1
Size: - Virtual size: 19KB

ZP2
Size: 75KB - Virtual size: 75KB

.reloc
Size: 512B - Virtual size: 184B