9babfa820ef18954d257eec9ded1e07a07cf0d45e4dc6f967dcf327a03717b48

Sharing

Copy URL Twitter E-mail

General

Target

9babfa820ef18954d257eec9ded1e07a07cf0d45e4dc6f967dcf327a03717b48
Size

78KB
MD5

79b8638715120cf8754c0cfbe177617f
SHA1

96918587e73415ce7e041a2324d5946e461946a6
SHA256

9babfa820ef18954d257eec9ded1e07a07cf0d45e4dc6f967dcf327a03717b48
SHA512

c73d75cd2930bd7f9a4586199efb0e6652e9b34d072c18a585962044c229ff37e2e898fc758a73dce42db89ff4a4316679b61f81cd621a5ab8dbd73c86ccd1db
SSDEEP

1536:MNU64LBHLLvz8qANobS5bAkVeOblPHbzmGIwPCaXua98LvLs:MqBrLLTANobv1YDDIw6aXV98Ljs

Score

N/A

Malware Config

Signatures

Files

9babfa820ef18954d257eec9ded1e07a07cf0d45e4dc6f967dcf327a03717b48
.dll windows x86

2c304f1ba1ef7e8e82557555be75711b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
IsBadWritePtr
TerminateProcess
VirtualQuery
GetFileType
CreateTimerQueueTimer
ReleaseMutex
GetACP
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
GetModuleHandleA
IsBadCodePtr
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchangeAdd
InitializeCriticalSection
InterlockedDecrement
VirtualProtect
SetEvent
HeapAlloc
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
WaitForSingleObject
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
InterlockedExchange
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
DuplicateHandle
GetVersionExA
LoadLibraryA
CreateEventA
GetTickCount
GetLastError
ResetEvent
CreateNamedPipeA
UnmapViewOfFile
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CreateMutexW
GetOEMCP
HeapDestroy
LCMapStringA
CreateThread
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteTimerQueueTimer
OpenProcess
RtlUnwind
SetLastError
WaitForMultipleObjects
HeapFree
InterlockedCompareExchange
UnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
lstrcpyW
FreeEnvironmentStringsA
ExitThread
GetBinaryTypeA
lstrcatW
Sleep
EnterCriticalSection

user32

LoadIconA
DrawIcon
CreateIconFromResource
wsprintfW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

msvcrt

_stricmp
_strnicmp
_wcsnset
wcsstr
fprintf
fflush
realloc
wcsncmp
wcstol
wcstod
calloc
_wtoi
_ltow
wcstok
malloc
free
wcslen
wcschr
swprintf
wcscmp
fgetws
wcscat
wcscpy
isdigit
exit
vwprintf
strtok
towupper
wprintf
printf
memmove
memset
memcpy
scanf

Exports

Exports

eiyikwe

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c304f1ba1ef7e8e82557555be75711b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 58KB

.data Size: 17KB - Virtual size: 46KB

.reloc Size: 1024B - Virtual size: 704B

.text
Size: 59KB - Virtual size: 58KB

.data
Size: 17KB - Virtual size: 46KB

.reloc
Size: 1024B - Virtual size: 704B