22be5788783130cff25672b3762045716e6aaf0495761ac383cb56b15e18b050

Sharing

Copy URL Twitter E-mail

General

Target

22be5788783130cff25672b3762045716e6aaf0495761ac383cb56b15e18b050
Size

253KB
MD5

0845214b38e394e5595ce4357e9d5fc1
SHA1

3355bae038e43e5e5084725f1478bd2603f6d0a5
SHA256

22be5788783130cff25672b3762045716e6aaf0495761ac383cb56b15e18b050
SHA512

981b3f4261e359d97047f50197d66d0d2bcd85a94934641b61c79aecd4175967c188559b833b4869f62ebc6c3782fa18c44b7884b04cdb703779cbcceef2a974
SSDEEP

6144:HOvKio8NWTWFQ1wrMHeBv0Br1wLo0R5eSGm:HOSiUWFQ2rMOOrenm

Score

N/A

Malware Config

Signatures

Files

22be5788783130cff25672b3762045716e6aaf0495761ac383cb56b15e18b050
.exe windows x86

3936b54237fca936539fde3619e023f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

TlsAlloc
InitializeCriticalSection
CloseHandle
CreateEventA
SetEvent
CreateThread
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
VirtualProtect
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
GetCommandLineA
GetLastError
GetACP
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime

user32

SetDlgItemTextA
ModifyMenuA
UpdateWindow
LoadCursorA
EndPaint
GetMessageA
RegisterClassExA
LoadStringA
LoadMenuA
LoadIconA
SendMessageA
BeginPaint
TranslateMessage
InvalidateRect
CreateWindowExA
TranslateAcceleratorA
EndDialog
SetWindowPos
LoadAcceleratorsA
DrawMenuBar
PostMessageA
DispatchMessageA
SetWindowTextA
GetDlgItemTextA
WinHelpA
CheckMenuItem
DefWindowProcA
CloseWindow
DialogBoxParamA
PostQuitMessage
TrackPopupMenu
GetSubMenu
GetWindowPlacement
GetSystemMetrics
GetDlgItem
SendDlgItemMessageA
SetDlgItemInt
GetDlgItemInt

gdi32

GetObjectA
BitBlt
CreateCompatibleDC
MoveToEx
LineTo
DeleteObject
SelectObject
CreatePen
GetStockObject
DeleteDC

ws2_32

shutdown
closesocket
WSAStartup
socket
WSACleanup
inet_addr
gethostbyname
htons
connect
setsockopt
recv
send
WSAGetLastError
select

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3936b54237fca936539fde3619e023f6

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

ws2_32

advapi32

Sections

.text Size: 217KB - Virtual size: 217KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 217KB - Virtual size: 217KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 16KB