99355f02e5ee6f9149e06e57e3ff7d019c15ea7fd400763ecb62c5b0dfdfa897

Sharing

Copy URL Twitter E-mail

General

Target

99355f02e5ee6f9149e06e57e3ff7d019c15ea7fd400763ecb62c5b0dfdfa897
Size

180KB
MD5

9e3f2c29e5a66e861ceb82c2f2f8bf0e
SHA1

8f6c3adcc0a79ed418fec28320ae172d47710cd0
SHA256

99355f02e5ee6f9149e06e57e3ff7d019c15ea7fd400763ecb62c5b0dfdfa897
SHA512

74f88d1c772f559782d304e25217b273da7df82dc5800c913be5dcc67d94f1b1f17c953356eaea8898be81026643c8377e6b0ca0b5fddd65384adc19aac51741
SSDEEP

3072:cleewZjfLTUWPzUo1xufnAvgj+wLGb4ltITsY0J:cl1wZjfnUWwojeAI6wo4QQFJ

Score

N/A

Malware Config

Signatures

Files

99355f02e5ee6f9149e06e57e3ff7d019c15ea7fd400763ecb62c5b0dfdfa897
.dll windows x86

717dd917a32cf2f263f5df8bf7f49976

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
TerminateThread
Sleep
ResumeThread
DeleteCriticalSection
VirtualFree
EnterCriticalSection
VirtualAlloc
GetLastError
ResetEvent
CancelIo
GetTickCount
HeapAlloc
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
GetFileSize
ReadFile
MoveFileA
lstrcatA
lstrcmpiA
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetStartupInfoA
WaitForMultipleObjects
TerminateProcess
GetVersionExA
OpenEventA
ExitProcess
GetCurrentProcess
Process32Next
RtlUnwind
RaiseException
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetCommandLineA
GetVersion
LeaveCriticalSection
TlsAlloc
TlsFree
SetLastError
InitializeCriticalSection
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW
LocalAlloc
InterlockedExchange

Exports

Exports

EndWork
Runing
Working
fuckabc

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

717dd917a32cf2f263f5df8bf7f49976

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 109KB

.reloc Size: 4KB - Virtual size: 2KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 28KB - Virtual size: 36KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 112KB - Virtual size: 109KB

.reloc
Size: 4KB - Virtual size: 2KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 28KB - Virtual size: 36KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 12KB - Virtual size: 8KB