d469ba8e0a3713db77766107d94e9d9465115b85f8925d49e6bd9214c75376b4

Sharing

Copy URL Twitter E-mail

General

Target

d469ba8e0a3713db77766107d94e9d9465115b85f8925d49e6bd9214c75376b4
Size

68KB
MD5

03ab697382216c3ef88f3507b615924a
SHA1

7ffb3f02b9d9240658ae348638f9bb4acbb81b1c
SHA256

d469ba8e0a3713db77766107d94e9d9465115b85f8925d49e6bd9214c75376b4
SHA512

f0976b8d9832db8bc069db9ed706393ed19fa1a0e8b1d0a17e981edf2c91e4da4c65d3ae5d0b971c73f9a5958dc24ff3c427f604b953762f5e89fbe2b4cb0f2b
SSDEEP

768:rS+CG9VeXafryprpf4RaPPEyZuJVCkL1LNF9hWeP9xW6CX75hr3ro9to4tlFc4:uW9VearyDwRaHEaGh1WeP9c6CjA9toN

Score

N/A

Malware Config

Signatures

Files

d469ba8e0a3713db77766107d94e9d9465115b85f8925d49e6bd9214c75376b4
.exe windows x86

4dfa2f8a91d5bdf02763da9b63ce69eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
PeekMessageA
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
DefWindowProcA
SetTimer
GetCursorPos
RegisterClassA
GetMessageA
DispatchMessageA
MessageBoxA
IsWindow
UpdateWindow
CreateWindowExA
ShowWindow
LoadCursorA

kernel32

GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
FreeEnvironmentStringsA
CompareStringA
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
SystemTimeToFileTime
CopyFileA
GetWindowsDirectoryA
GetCurrentDirectoryA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
ReadFile
ExpandEnvironmentStringsA
GetFileSize
FindClose
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
GetTickCount
LocalFree
LocalAlloc
LocalSize
GetStartupInfoA
Sleep
SleepEx
ExitThread
FreeLibrary
CreateThread
GetProcAddress
LoadLibraryA
SetThreadPriority
GetCurrentThread
GetModuleFileNameA
ExitProcess
ReleaseMutex
GetLastError
HeapFree
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetTimeZoneInformation
GetFileType
GetCPInfo
SetStdHandle
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapAlloc
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
GetStringTypeW
FlushFileBuffers
GetSystemTime
HeapDestroy
HeapReAlloc
GetModuleHandleA
GetCommandLineA
GetVersion

wsock32

send
WSAStartup
WSACleanup
recv
ioctlsocket
htons
connect
closesocket
socket
gethostbyname

gdi32

GetStockObject

advapi32

RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

Exports

Exports

_SetMouseHook@8

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4dfa2f8a91d5bdf02763da9b63ce69eb

Headers

File Characteristics

Imports

user32

kernel32

wsock32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 20KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 20KB