2467e4faf699ddddfe678bb867bc89a4a629df3bfab30950c0ca3887053ea4b5

Sharing

Copy URL

Twitter E-mail

General

Target

2467e4faf699ddddfe678bb867bc89a4a629df3bfab30950c0ca3887053ea4b5
Size

82KB
MD5

b3b57bd92f47fe4f5cfe508adb2baff1
SHA1

9a37aa9eddc2b3071bf266278c140af9a0b10d9c
SHA256

2467e4faf699ddddfe678bb867bc89a4a629df3bfab30950c0ca3887053ea4b5
SHA512

447f92fc3dde24f902c0f3281d505330590ce6cf6d3654ffc049269a7bec7b2cc0d1bca46a32e3f82ac5ebde5973088badbb71dc343fc4ba6b2f17407367e6da
SSDEEP

1536:1W8DV3YrtryLNKiiju8L8cwEMfrw0SXVqB4qpEJbr:FV36tryLciiK8L8rEurw0kqB4qpEl

Score

N/A

Malware Config

Signatures

Files

2467e4faf699ddddfe678bb867bc89a4a629df3bfab30950c0ca3887053ea4b5
.dll windows x86

9e1d749e7560f20e62142a23bbcf69e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
SetEvent
InterlockedExchange
Sleep
GetLastError
CreateDirectoryA
lstrlenA
CreateProcessA
lstrcatA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
LocalAlloc
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
MoveFileA
SetLastError
GetVersionExA
GetCurrentProcess
CreateRemoteThread
WriteProcessMemory
FreeLibrary
TerminateThread
ResetEvent
MoveFileExA
GetTickCount
GetLocalTime
MapViewOfFile
CreateFileMappingA
HeapFree
GetProcessHeap
UnmapViewOfFile
WaitForSingleObject
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CreatePipe
TerminateProcess
PeekNamedPipe
DeviceIoControl
GlobalMemoryStatusEx
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
CreateToolhelp32Snapshot
GetCurrentThreadId
CloseHandle
CreateEventA
EnterCriticalSection
VirtualFree
InitializeCriticalSection
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
RaiseException

user32

CharNextA
wsprintfA
MessageBoxA
SendMessageA
IsWindowVisible
EnumWindows
GetWindowTextA
GetActiveWindow
GetUserObjectInformationA
OpenInputDesktop
SetThreadDesktop
CloseDesktop
GetWindowThreadProcessId
OpenWindowStationA
GetCursorPos
ReleaseDC
SetRect
GetSystemMetrics
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
mouse_event
SetCursorPos
WindowFromPoint
SetCapture
keybd_event
SystemParametersInfoA
LoadCursorA
SetWindowsHookExA
CallNextHookEx
GetKeyNameTextA

gdi32

SelectObject
CreateCompatibleDC
DeleteObject
BitBlt
GetDIBits
CreateCompatibleBitmap
CreateDIBSection

shell32

SHGetFileInfoA

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

msvcrt

_strnicmp
calloc
_beginthreadex
atoi
realloc
strncat
strchr
strncpy
strcat
_local_unwind2
fopen
fwrite
fclose
_strcmpi
strcmp
strrchr
_except_handler3
malloc
free
memcmp
??2@YAPAXI@Z
memset
_CxxThrowException
__CxxFrameHandler
strstr
strlen
_ftol
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strcpy
memcpy
memmove
ceil

Exports

Exports

main

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e1d749e7560f20e62142a23bbcf69e3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msvcp60

msvcrt

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 5KB - Virtual size: 4KB