9d4283d4ceaef679c02b6ef8b0693fb14ec36263e8b79ce8dab098852d783b7f

General

Target

9d4283d4ceaef679c02b6ef8b0693fb14ec36263e8b79ce8dab098852d783b7f
Size

160KB
MD5

0955a197fe32b5ae34c687661a490690
SHA1

477189db9b8ed6e19a9bc2e6b6de19ffe2842c8a
SHA256

9d4283d4ceaef679c02b6ef8b0693fb14ec36263e8b79ce8dab098852d783b7f
SHA512

e494a3de7e6e34cdeafa001b9f024292aee9a0e2c7e6df473829213720fb22dbed5849ad3459a4e7ccda093948fc91d5fb76636b3d27c89e9ac626ecc66ddc6f
SSDEEP

3072:dIgMpyuV14EPg972xVwe2yPfWJW9RzQbN/c40VpVQleDWSKxeBSViG3ZlZ90:xMQeI8h2ymJE8AVpVLDWSQVi6Zl30

Score

N/A

Malware Config

Signatures

Files

9d4283d4ceaef679c02b6ef8b0693fb14ec36263e8b79ce8dab098852d783b7f
.dll windows x86

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA

user32

GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect

advapi32

RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor

msvcrt

_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa

gdi32

GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode

shell32

ord680

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.reloc
Size: 3KB - Virtual size: 2KB