88f97a513549cfffc7dea82ecd8a0ec4586ca4a4b34c7fef1fc66567bc3294a2

Sharing

Copy URL

Twitter E-mail

General

Target

88f97a513549cfffc7dea82ecd8a0ec4586ca4a4b34c7fef1fc66567bc3294a2
Size

33KB
MD5

8088b2c1af5ab4fcc98ccff6d605998d
SHA1

b2f5ad26569900327be98ea87292c6679f7e0e2a
SHA256

88f97a513549cfffc7dea82ecd8a0ec4586ca4a4b34c7fef1fc66567bc3294a2
SHA512

79d7ab6f24173f3b8fd1d998ea0834e7a5e9baa7b7ebc68c283b19b1d7791e45ec8111c57e6a3a348eabb011597f94ddd0decd0334dc4678c03dd3272743f2a8
SSDEEP

768:ShXNjmDy+rE9tlDqhTTJqUV/WRThlnMnHr2/rm:CdjmSlD+oUERVlnMnL2S

Score

N/A

Malware Config

Signatures

Files

88f97a513549cfffc7dea82ecd8a0ec4586ca4a4b34c7fef1fc66567bc3294a2
.dll windows x86

198d8d09809ff0b19cc77ccdd8ba7537

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
lstrlenA
GetPrivateProfileStringA
WideCharToMultiByte
ReadProcessMemory
LoadLibraryA
GetTempPathA
SetThreadPriority
GetFileSize
ReadFile
CreateFileA
GetProcessHeap
HeapAlloc
VirtualProtect
VirtualProtectEx
GetCurrentProcessId
GetTickCount
DeviceIoControl
GetModuleFileNameA
GetLastError
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
InitializeCriticalSection
CloseHandle
OpenProcess
GetModuleHandleA
WriteProcessMemory
InterlockedExchange
DeleteCriticalSection

msvcrt

strrchr
_stricmp
malloc
_except_handler3
strchr
_vsnprintf
isspace
isalnum
wcscat
atoi
exit
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strcmpi
wcsstr
wcslen
wcsncat
wcscpy
free
_strlwr
mbstowcs
wcscmp
sprintf
strncpy
strlen
strstr
strcpy
strcat
memcpy
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler

gdiplus

GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup

gdi32

DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject

wsock32

shutdown
closesocket

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

user32

GetForegroundWindow
GetClassNameW
GetWindow
wsprintfA

Exports

Exports

DllMoveFile

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

198d8d09809ff0b19cc77ccdd8ba7537

Headers

File Characteristics

Imports

kernel32

msvcrt

gdiplus

gdi32

wsock32

advapi32

user32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB