baa7e6291a924cd557fd24e0754dd60d876bad9b93340376480cc1c259bf0efb

Sharing

Copy URL Twitter E-mail

General

Target

baa7e6291a924cd557fd24e0754dd60d876bad9b93340376480cc1c259bf0efb
Size

13KB
MD5

cdb9a795fadd89a9ef67f607d8754246
SHA1

8a0e1af3b90649a9ae157b966451594fc979d125
SHA256

baa7e6291a924cd557fd24e0754dd60d876bad9b93340376480cc1c259bf0efb
SHA512

6b54af6a788b431b5f32ea285521644991db4f496a48d2eb079040f61217c2cfd2d535bedf2499a62c5f293e1616c017d8b6949ac68e1e605668041d8d131ce6
SSDEEP

384:1dHfUurh5SdglQY+U0CyUXCjSgTWYAQyWBE:T8uDSKlTJ8iQq

Score

N/A

Malware Config

Signatures

Files

baa7e6291a924cd557fd24e0754dd60d876bad9b93340376480cc1c259bf0efb
.dll windows x86

99e0ce98f6f6632f44a31a1b8209d9fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
TerminateThread
CreateThread
WaitForSingleObject
GetProcAddress
LoadLibraryA
GetTempPathA
WinExec
CloseHandle
Sleep
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
lstrcatA
ExitProcess
lstrcpyW
GetModuleHandleA
FreeLibrary

user32

MessageBoxA
wsprintfA

shlwapi

PathFileExistsA

ws2_32

recvfrom
sendto
inet_ntoa
inet_addr
htons
socket
WSAGetLastError
WSAStartup
closesocket
ntohs

msvcrt

_adjust_fdiv
_itoa
_initterm
free
atoi
strncpy
strtok
time
srand
rand
strcpy
memcpy
memcmp
memset
malloc
strlen
strcat
sprintf

Exports

Exports

LpkPresent
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem
UspFreec

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99e0ce98f6f6632f44a31a1b8209d9fa

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 636B

.text
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 636B