77f099c5bc790fcc51c6c697972b6d30e617b17c96accafadcdf42eb9487183b

Sharing

Copy URL Twitter E-mail

General

Target

77f099c5bc790fcc51c6c697972b6d30e617b17c96accafadcdf42eb9487183b
Size

285KB
MD5

04aa5b2054f38940577493d304489856
SHA1

f8630ba765e7d65bf90aed5acc7441bbb7dddc6f
SHA256

77f099c5bc790fcc51c6c697972b6d30e617b17c96accafadcdf42eb9487183b
SHA512

c2082b4781c504bc4ec620c6c4d8f718315ea5bc8e18f8f1b7282a26d77e39006c1f1dcab161a25c6741ddb92891af82908cf5e51c7db90cc000cd664a49d921
SSDEEP

6144:a6x+O+0B899m5LrZ/XSXnI3zHWRb9ZhHosAQSZQSY6N8Dd6Vdqm/:a6sO+X9m5XZ/XSXI2bzFoQS5N4MV5

Score

N/A

Malware Config

Signatures

Files

77f099c5bc790fcc51c6c697972b6d30e617b17c96accafadcdf42eb9487183b
.exe windows x86

927de8a9597de2ceb5c70bacee8a9019

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

InitializeCriticalSection
CloseHandle
CreateEventA
SetEvent
CreateThread
InterlockedExchange
Sleep
InterlockedCompareExchange
TlsAlloc
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
VirtualProtect
ExitProcess
DeleteCriticalSection
GetCommandLineA
GetLastError
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime

user32

SetDlgItemTextA
ModifyMenuA
UpdateWindow
LoadCursorA
EndPaint
GetMessageA
RegisterClassExA
LoadStringA
LoadMenuA
LoadIconA
SendMessageA
BeginPaint
TranslateMessage
InvalidateRect
CreateWindowExA
TranslateAcceleratorA
EndDialog
SetWindowPos
LoadAcceleratorsA
DrawMenuBar
PostMessageA
DispatchMessageA
SetWindowTextA
GetDlgItemTextA
WinHelpA
CheckMenuItem
DefWindowProcA
CloseWindow
DialogBoxParamA
PostQuitMessage
TrackPopupMenu
GetSubMenu
GetWindowPlacement
GetSystemMetrics
GetDlgItem
SendDlgItemMessageA
SetDlgItemInt
GetDlgItemInt

gdi32

GetObjectA
BitBlt
CreateCompatibleDC
MoveToEx
LineTo
DeleteObject
SelectObject
CreatePen
GetStockObject
DeleteDC

ws2_32

shutdown
closesocket
WSAStartup
socket
WSACleanup
inet_addr
gethostbyname
htons
connect
setsockopt
recv
send
WSAGetLastError
select

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

927de8a9597de2ceb5c70bacee8a9019

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

ws2_32

advapi32

Sections

.text Size: 252KB - Virtual size: 251KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 252KB - Virtual size: 251KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 16KB