88f75e4d165ff6fafd7598b368b108bef0c29a9f7b8c366cf7a4e20a9a7ad693

Sharing

Copy URL Twitter E-mail

General

Target

88f75e4d165ff6fafd7598b368b108bef0c29a9f7b8c366cf7a4e20a9a7ad693
Size

48KB
MD5

7eb087189092df71710a2957e4d01b5a
SHA1

2229336490ef43d667613f6505d748c506f05a31
SHA256

88f75e4d165ff6fafd7598b368b108bef0c29a9f7b8c366cf7a4e20a9a7ad693
SHA512

c8f83985a36720292e3842ee80a446f6188e906d97b877b21e15ae96a79544511bc9b548178cb981919cf0bcff302a43f294f4817663eb9314ad936add9812b5
SSDEEP

768:w38cUkre0VMz3Kz0HIqPcrGsLrgN9MAI1wESgmiFgvdOXLO4030YjTf+t10P:w360AsH10g44bf

Score

N/A

Malware Config

Signatures

Files

88f75e4d165ff6fafd7598b368b108bef0c29a9f7b8c366cf7a4e20a9a7ad693
.exe windows x86

92d0f289d68288863962d0a25ca9a62d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtFindAtom

gdi32

SetTextColor
CreateSolidBrush
DeleteObject
PatBlt
SelectObject
GetDeviceCaps
IntersectClipRect
BitBlt
ExtTextOutW
SetBkMode
GetTextExtentPointW
CreateCompatibleDC
SetBkColor
CreateDIBitmap
DeleteDC

ws2_32

WSAGetLastError

kernel32

LeaveCriticalSection
SizeofResource
GlobalDeleteAtom
GetEnvironmentVariableW
LoadResource
GetModuleHandleA
lstrcmpW
GlobalAddAtomW
VirtualAlloc
GetProcAddress
GetSystemDirectoryW
lstrlenW
GlobalAlloc
GetVersion
FindResourceW
lstrcmpiW
GetProfileStringW
EnterCriticalSection
GetCurrentThreadId
GlobalFree
GetModuleFileNameW
InitializeCriticalSection

user32

ExcludeUpdateRgn
InflateRect
EndPaint
GetWindowDC
IsWindowEnabled
GetWindowRect
DrawFocusRect
RemovePropW
GetClassInfoW
CallWindowProcW
DrawTextW
ShowCaret
ReleaseDC
IntersectRect
SetWindowLongA
GetParent
GetFocus
CallNextHookEx
UnhookWindowsHookEx
GetWindow
GetWindowLongW
DefWindowProcW
CharPrevW
IsWindowUnicode
GetPropW
DefDlgProcW
GetClientRect
SetWindowsHookExW
GetSystemMetrics
ScreenToClient
InvalidateRect
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
HideCaret
MapWindowPoints
ClientToScreen
ValidateRect
GetSysColor
GetDC
SendMessageW
BeginPaint
OffsetRect
IsIconic
MessageBoxA
CharNextW
SetPropW
GetClassNameW

adsldpc

ADsFreeColumn

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 45KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

92d0f289d68288863962d0a25ca9a62d

Headers

File Characteristics

Imports

ntdll

gdi32

ws2_32

kernel32

user32

adsldpc

Sections

.textbss Size: - Virtual size: 1.3MB

.text Size: 512B - Virtual size: 444B

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 448B

.idata Size: 45KB - Virtual size: 116KB

.textbss
Size: - Virtual size: 1.3MB

.text
Size: 512B - Virtual size: 444B

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 448B

.idata
Size: 45KB - Virtual size: 116KB