96e808fca9deaadf680d69f9228cf7da1ffe435a823c1d448312afd4d94b2420

General

Target

96e808fca9deaadf680d69f9228cf7da1ffe435a823c1d448312afd4d94b2420
Size

164KB
MD5

8299fd3598cb55c864451fdf723f7c7f
SHA1

b2a55dafca587646b3bbcae3236d7b372f495171
SHA256

96e808fca9deaadf680d69f9228cf7da1ffe435a823c1d448312afd4d94b2420
SHA512

256aeead2ebd316e6f619751d48e9f0fdfac9d561f946bcb3f17944363ebe28fc00753e2612c0a0b130b515285691915dc3aca8a828652a627df4a2365948ca6
SSDEEP

3072:dIgMpyuV14EPg972xVwe2yPfWJW9RzQbN/c404pVQleDWSKxeBSViG3ZlZ9hx:xMQeI8h2ymJE8A4pVLDWSQVi6Zl3hx

Score

N/A

Malware Config

Signatures

Files

96e808fca9deaadf680d69f9228cf7da1ffe435a823c1d448312afd4d94b2420
.dll windows x86

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA

user32

GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect

advapi32

RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor

msvcrt

_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa

gdi32

GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode

shell32

ord680

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.reloc
Size: 3KB - Virtual size: 2KB