39de3fea13dad004f75b4a17a27fa065060c4c994dbc40ee4006dc081ee4bd89

Sharing

Copy URL Twitter E-mail

General

Target

39de3fea13dad004f75b4a17a27fa065060c4c994dbc40ee4006dc081ee4bd89
Size

209KB
MD5

037b295c1627660a4bf506799d7b98ba
SHA1

900d46f1da1c6e92839a4cb661ecf48e31329714
SHA256

39de3fea13dad004f75b4a17a27fa065060c4c994dbc40ee4006dc081ee4bd89
SHA512

36dc5603cd96e3b4f5250ea6f05ac1a14ce208359ea6320d68ab0acf459e67ed5bda10c5b575cf4c9be1ac012cf01f9a471400f9bcda54aeed3ab80077b2db88
SSDEEP

6144:OWwZ66XgY8dE+x4MSwlHQ5VLThEIS5M+LFM7EvBgEIO:TxDY8d1zSqHILAlxMYBr

Score

N/A

Malware Config

Signatures

Files

39de3fea13dad004f75b4a17a27fa065060c4c994dbc40ee4006dc081ee4bd89
.exe windows x86

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
lstrlenW
MulDiv
GetVersionExW
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
lstrcpynW
IsBadCodePtr
GlobalHandle
GetACP
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryW
InterlockedExchange
WaitForMultipleObjects
HeapFree
ReleaseSemaphore
GetFileSize
GlobalFree
lstrcpyA
GetQueuedCompletionStatus
SetUnhandledExceptionFilter
SetEndOfFile
InterlockedDecrement
GetTickCount
GetThreadPriority
lstrlenA
GetSystemTimeAsFileTime
GetFullPathNameW
lstrcmpW
CreateEventW
SetEvent
SetThreadPriority
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSection
GetCurrentThread
ReadFile
ResetEvent
VirtualFree
GlobalAlloc
GetFileAttributesW
GlobalLock
InterlockedIncrement
WaitForSingleObject
GetLastError
SetFilePointer
WideCharToMultiByte
GetSystemInfo
WriteFile
CreateThread
CreateSemaphoreW
GetProcessHeap
FreeLibrary
lstrcmpiW
GetCurrentProcess
GetPrivateProfileStringW
GetDiskFreeSpaceW
IsBadWritePtr
DeleteCriticalSection
LeaveCriticalSection
CreateFileW
GetCurrentProcessId
IsBadReadPtr
HeapAlloc
lstrcpyW
GetEnvironmentStringsW
GetProfileIntA

user32

GetDlgItem
TranslateMessage
DispatchMessageW
SetDlgItemTextW
SetCursor
GetDesktopWindow
IsWindow
DestroyWindow
GetDC
ReleaseDC
CheckRadioButton
SetDlgItemInt
LoadCursorW
LoadStringW
GetWindowLongW
GetDlgItemInt
DefWindowProcW
EnableWindow
SendMessageW
CheckDlgButton
IsRectEmpty
ClientToScreen
InvalidateRect
PeekMessageW
MoveWindow
SetWindowLongW
ShowWindow
IsWindowVisible
GetClientRect
GetWindowRect
GetAsyncKeyState
CreateDialogParamW

netshell

StartNCW
NcIsValidConnectionName
DllGetClassObject

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

Imports

kernel32

user32

netshell

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 41KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 41KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB