9429f7e0b2741259d5aee726cbc55249ec453e209847b252ad9e7109ed4c6096

Sharing

Copy URL

Twitter E-mail

General

Target

9429f7e0b2741259d5aee726cbc55249ec453e209847b252ad9e7109ed4c6096
Size

25KB
MD5

fe105b6baae6a18f274e01da9444e007
SHA1

3f2fe7a1f474c7e6b070fbc0130864fb1c02b058
SHA256

9429f7e0b2741259d5aee726cbc55249ec453e209847b252ad9e7109ed4c6096
SHA512

3e312ce5adcb02e2ed1745c39a4cb96102703080a3271827c4c57f8bc97aa131895daa5f69e7f21e2d78088eeeecb054e315fd2f2f4e2bce217beaa58809f56d
SSDEEP

384:dBxhKpORIWxcrLS6FwuTAxxNrmI+0GET9DLoZn1zn4l3XhGSi1DZ6cCWWo:dQWTxcrLSwTUxNr5Dy1WXhgDZ6cOo

Score

N/A

Malware Config

Signatures

Files

9429f7e0b2741259d5aee726cbc55249ec453e209847b252ad9e7109ed4c6096
.exe windows x86

1e6968128e6f7b829cc594a7cbf4b99b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtFindAtom

user32

GetFocus
HideCaret
SetWindowLongW
ValidateRect
MessageBoxA
DrawTextW
ClientToScreen
OffsetRect
ReleaseDC
GetDC
ExcludeUpdateRgn
IsIconic
ShowCaret
GetClassNameW
GetSysColor
CallNextHookEx
DrawFocusRect
GetClassInfoW
GetClientRect
GetSystemMetrics
SetWindowLongA
GetPropW
SetPropW
GetWindow
BeginPaint
DefWindowProcW
GetWindowTextW
GetWindowDC
EndPaint
RemovePropW
MapWindowPoints
IntersectRect
IsWindowUnicode
SetWindowsHookExW
GetWindowTextLengthW
DefDlgProcW
UnhookWindowsHookEx
ScreenToClient
GetWindowLongW
GetWindowRect
CharPrevW
IsWindowEnabled
InvalidateRect
InflateRect
GetParent
CharNextW
CallWindowProcW
SendMessageW

kernel32

GetProcAddress
GetVersion
GetCurrentThreadId
LeaveCriticalSection
GlobalDeleteAtom
EnterCriticalSection
GetWindowsDirectoryW
GlobalAlloc
LoadResource
GetSystemDirectoryW
lstrcmpiW
FindResourceW
SizeofResource
VirtualAlloc
lstrlenW
lstrcmpW
GetModuleHandleA
GlobalAddAtomW
GetEnvironmentVariableW
InitializeCriticalSection
GetProfileStringW
GetModuleFileNameW

ws2_32

WSAGetLastError

adsldpc

ADsFreeColumn

gdi32

CreateDIBitmap
DeleteObject
GetTextExtentPointW
GetDeviceCaps
CreateSolidBrush
SetTextColor
BitBlt
CreateCompatibleDC
SetBkColor
SetBkMode
IntersectClipRect
DeleteDC
PatBlt
ExtTextOutW
SelectObject

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e6968128e6f7b829cc594a7cbf4b99b

Headers

File Characteristics

Imports

ntdll

user32

kernel32

ws2_32

adsldpc

gdi32

Sections

.textbss Size: - Virtual size: 96KB

.text Size: 512B - Virtual size: 444B

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 216B

.idata Size: 23KB - Virtual size: 22KB

.textbss
Size: - Virtual size: 96KB

.text
Size: 512B - Virtual size: 444B

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 216B

.idata
Size: 23KB - Virtual size: 22KB