684fdd3bc563c84f402bb075c46cadac6e8bd73eaab4276d78d2f73a3aaacd66

General

Target

684fdd3bc563c84f402bb075c46cadac6e8bd73eaab4276d78d2f73a3aaacd66
Size

98KB
MD5

0879cc63bd148dcdac40350ab59a2673
SHA1

21c44ad087dace289bf74269a2a5c096904986ad
SHA256

684fdd3bc563c84f402bb075c46cadac6e8bd73eaab4276d78d2f73a3aaacd66
SHA512

5b070d56ac1a8132baff7ae7eb084fc0ea1988b171032f618dbfc6a27a1e51fa688d1ca64531f2c59327ce358b2a1d5f954d1f3f4c38bd2e2ab70a41f563245b
SSDEEP

1536:SaktykKYUQfESyiTlt31PsnKUruKnOHeqq9VhJZqu4DQdpcbm42O/rZygxCfGwDv:S1kkpUoy4X1U2KnWQ1qhDJm42oJuD38W

Score

N/A

Malware Config

Signatures

Files

684fdd3bc563c84f402bb075c46cadac6e8bd73eaab4276d78d2f73a3aaacd66
.dll windows x86

b64c3093e571036188314eb25598328e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
WinExec
GetProfileStringA
VirtualFree
HeapCreate
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
LoadLibraryA
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
Sleep
EnterCriticalSection
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection

user32

DdeDisconnect
LoadCursorA
DdeCreateStringHandleA
MessageBoxA
DdeConnect
SetCursor
DdeClientTransaction
DdeUninitialize
IsWindow
SetFocus
GetFocus
DdeInitializeA

Exports

Exports

IRISDdeConnect
IRISDdeCreate
IRISDdeDestroy
IRISDdeDisconnect
IRISSendDdeComm

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b64c3093e571036188314eb25598328e

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 9KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 76KB - Virtual size: 76KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 9KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 76KB