e0b83a7f7be501fe31408b6aec55687ca8fce5826947df95f17e15377449d73e

Sharing

Copy URL Twitter E-mail

General

Target

e0b83a7f7be501fe31408b6aec55687ca8fce5826947df95f17e15377449d73e
Size

209KB
MD5

322a481b838ee189dacc123dfbf1ea2a
SHA1

2a2f6ddb1ab5f19c594b02edf624c30e79809a22
SHA256

e0b83a7f7be501fe31408b6aec55687ca8fce5826947df95f17e15377449d73e
SHA512

611ee990df11bec04333f61f35e1e8b4e3522d9ff0746202e41fef9f50d5054095ce51ef8111a15479b5f7e7550bbb42a0275571bd16f056fe8e4cc79d78e4ae
SSDEEP

6144:OWwZ66XgY8dE+x4MSwlHQ5VLThEIS5M+LFM7EvBgEIX:TxDY8d1zSqHILAlxMYBa

Score

N/A

Malware Config

Signatures

Files

e0b83a7f7be501fe31408b6aec55687ca8fce5826947df95f17e15377449d73e
.exe windows x86

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
lstrlenW
MulDiv
GetVersionExW
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
lstrcpynW
IsBadCodePtr
GlobalHandle
GetACP
MultiByteToWideChar
GetModuleFileNameA
LoadLibraryW
InterlockedExchange
WaitForMultipleObjects
HeapFree
ReleaseSemaphore
GetFileSize
GlobalFree
lstrcpyA
GetQueuedCompletionStatus
SetUnhandledExceptionFilter
SetEndOfFile
InterlockedDecrement
GetTickCount
GetThreadPriority
lstrlenA
GetSystemTimeAsFileTime
GetFullPathNameW
lstrcmpW
CreateEventW
SetEvent
SetThreadPriority
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSection
GetCurrentThread
ReadFile
ResetEvent
VirtualFree
GlobalAlloc
GetFileAttributesW
GlobalLock
InterlockedIncrement
WaitForSingleObject
GetLastError
SetFilePointer
WideCharToMultiByte
GetSystemInfo
WriteFile
CreateThread
CreateSemaphoreW
GetProcessHeap
FreeLibrary
lstrcmpiW
GetCurrentProcess
GetPrivateProfileStringW
GetDiskFreeSpaceW
IsBadWritePtr
DeleteCriticalSection
LeaveCriticalSection
CreateFileW
GetCurrentProcessId
IsBadReadPtr
HeapAlloc
lstrcpyW
GetEnvironmentStringsW
GetProfileIntA

user32

GetDlgItem
TranslateMessage
DispatchMessageW
SetDlgItemTextW
SetCursor
GetDesktopWindow
IsWindow
DestroyWindow
GetDC
ReleaseDC
CheckRadioButton
SetDlgItemInt
LoadCursorW
LoadStringW
GetWindowLongW
GetDlgItemInt
DefWindowProcW
EnableWindow
SendMessageW
CheckDlgButton
IsRectEmpty
ClientToScreen
InvalidateRect
PeekMessageW
MoveWindow
SetWindowLongW
ShowWindow
IsWindowVisible
GetClientRect
GetWindowRect
GetAsyncKeyState
CreateDialogParamW

netshell

StartNCW
NcIsValidConnectionName
DllGetClassObject

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c083ac4e43e39e7ba47e24f5228d34f

Headers

File Characteristics

Imports

kernel32

user32

netshell

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 41KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 41KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB