a49afc6a952c0b8f637ec000f6b49e3f2005413764cb5edd0a5ffa9e2d4746a3

Sharing

Copy URL

Twitter E-mail

General

Target

a49afc6a952c0b8f637ec000f6b49e3f2005413764cb5edd0a5ffa9e2d4746a3
Size

72KB
MD5

6f777901e2968caddf94eb29350e23ba
SHA1

ba08769f220fa14cc111ca4d7bce445b47ed9558
SHA256

a49afc6a952c0b8f637ec000f6b49e3f2005413764cb5edd0a5ffa9e2d4746a3
SHA512

b9144a96a483f349e1571840fc5a066edc5d6277c54246f35fe5ad7284a1018543fb9b31547523de1ad13e78c45a853ea50f9ae486e6301cd0eb817fb40e279e
SSDEEP

768:6PLyytbvwwGmoSQtCU1GmrxeQT3rghS8CTbovjUROU5PqwNJUWfjnUaq3HXktch2:6PLyytEwGm/2fT3rD82fIaSTmUa8kt

Score

N/A

Malware Config

Signatures

Files

a49afc6a952c0b8f637ec000f6b49e3f2005413764cb5edd0a5ffa9e2d4746a3
.dll windows x86

269c7233cfa9a45ada2f7258a40d67f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
WriteFile
SetEvent
WaitForSingleObject
InterlockedExchange
ResetEvent
IsDBCSLeadByte
FreeLibraryAndExitThread
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
InterlockedCompareExchange
InterlockedExchangeAdd
CloseHandle
Sleep
CreateThread
CreateNamedPipeA
GetCurrentProcessId
CreateEventA
LoadLibraryA
GetModuleFileNameA
VirtualFree
WriteProcessMemory
GetCurrentProcess
VirtualAlloc
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetFilePointer
EnterCriticalSection
LeaveCriticalSection

user32

SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetClientRect
PtInRect
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetActiveWindow
GetForegroundWindow
GetKeyState
GetAsyncKeyState
GetKeyboardState
GetCursorPos
MapVirtualKeyA
PostMessageA
ClientToScreen
ScreenToClient
GetWindowThreadProcessId
GetGUIThreadInfo
SendMessageA
CreateWindowExA
IsWindow
DestroyWindow

Exports

Exports

BindWindow

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

269c7233cfa9a45ada2f7258a40d67f2

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 18KB

.share Size: 4KB - Virtual size: 4B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 18KB

.share
Size: 4KB - Virtual size: 4B

.reloc
Size: 8KB - Virtual size: 4KB