63f352512479271c33c1d4f652b3adaed95ef2b1c352c0dadd2302ba2ff3205c

Sharing

Copy URL Twitter E-mail

General

Target

63f352512479271c33c1d4f652b3adaed95ef2b1c352c0dadd2302ba2ff3205c
Size

209KB
MD5

84bdbc7fa18cdaf5477a915dc36a7840
SHA1

d7092d9994875dc9e88cba3d1e9f858bfadeb93c
SHA256

63f352512479271c33c1d4f652b3adaed95ef2b1c352c0dadd2302ba2ff3205c
SHA512

74941a37a38dc934842ff50ed78616048bfbb30e6b4fed211517b857dad1ab0022f7988e7230e0a5c2e149290487ed99cdf5d7b0ab6d708cc363cf34d860e7d4
SSDEEP

6144:OWwZ66XgY8dE+x4MSwlHQ5VLThEIS5M+LFM7EvBgEIs:TxDY8d1zSqHILAlxMYB1

Score

N/A

Malware Config

Signatures

Files

63f352512479271c33c1d4f652b3adaed95ef2b1c352c0dadd2302ba2ff3205c
.exe windows x86

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
lstrlenW
MulDiv
GetVersionExW
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
lstrcpynW
IsBadCodePtr
GlobalHandle
GetACP
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryW
InterlockedExchange
WaitForMultipleObjects
HeapFree
ReleaseSemaphore
GetFileSize
GlobalFree
lstrcpyA
GetQueuedCompletionStatus
SetUnhandledExceptionFilter
SetEndOfFile
InterlockedDecrement
GetTickCount
GetThreadPriority
lstrlenA
GetSystemTimeAsFileTime
GetFullPathNameW
lstrcmpW
CreateEventW
SetEvent
SetThreadPriority
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSection
GetCurrentThread
ReadFile
ResetEvent
VirtualFree
GlobalAlloc
GetFileAttributesW
GlobalLock
InterlockedIncrement
WaitForSingleObject
GetLastError
SetFilePointer
WideCharToMultiByte
GetSystemInfo
WriteFile
CreateThread
CreateSemaphoreW
GetProcessHeap
FreeLibrary
lstrcmpiW
GetCurrentProcess
GetPrivateProfileStringW
GetDiskFreeSpaceW
IsBadWritePtr
DeleteCriticalSection
LeaveCriticalSection
CreateFileW
GetCurrentProcessId
IsBadReadPtr
HeapAlloc
lstrcpyW
GetEnvironmentStringsW
GetProfileIntA

user32

GetDlgItem
TranslateMessage
DispatchMessageW
SetDlgItemTextW
SetCursor
GetDesktopWindow
IsWindow
DestroyWindow
GetDC
ReleaseDC
CheckRadioButton
SetDlgItemInt
LoadCursorW
LoadStringW
GetWindowLongW
GetDlgItemInt
DefWindowProcW
EnableWindow
SendMessageW
CheckDlgButton
IsRectEmpty
ClientToScreen
InvalidateRect
PeekMessageW
MoveWindow
SetWindowLongW
ShowWindow
IsWindowVisible
GetClientRect
GetWindowRect
GetAsyncKeyState
CreateDialogParamW

netshell

StartNCW
NcIsValidConnectionName
DllGetClassObject

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

Imports

kernel32

user32

netshell

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 41KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 41KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB