aa9a6cc08bd2de47ba5d441779730d226b9df2e173f4ca883701f6b5b3c4620d

Sharing

Copy URL Twitter E-mail

General

Target

aa9a6cc08bd2de47ba5d441779730d226b9df2e173f4ca883701f6b5b3c4620d
Size

19KB
MD5

30d956f64dc217c7ef0b2a8ff1a33c3a
SHA1

0fd01273a281df45330b8d5af4ce86c3a069e320
SHA256

aa9a6cc08bd2de47ba5d441779730d226b9df2e173f4ca883701f6b5b3c4620d
SHA512

ae4d44f1ba44ca789ba4988ac5b70d8cbac7bcbab9e9939d1864602b6ccc725d6181db6d8300fd712e0183dfeca3192cef4400bd4e6e84f6278350667fbcdda4
SSDEEP

384:gX2/LdYeL/VSQqQh8H5NSsUiG77g9gtXsvfrIIXeKdUEE9FQhVNLqdd:1ueL/VSQqqWNA77git8HrXFdUEE9FQhv

Score

N/A

Malware Config

Signatures

Files

aa9a6cc08bd2de47ba5d441779730d226b9df2e173f4ca883701f6b5b3c4620d
.dll windows x86

f585788c79ceb2811e27ad2d0a2edd07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wvsprintfA
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowPos
ReleaseDC
ReleaseCapture
MessageBoxA
IsWindowVisible
GetWindowThreadProcessId
GetWindowTextA
GetDesktopWindow
CallNextHookEx
EnumWindows
wsprintfA
GetClassNameA
GetClientRect
GetDC

kernel32

CreateThread
CreateFileA
CloseHandle
FreeLibrary
GetCurrentProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
IsBadReadPtr
LoadLibraryA
MultiByteToWideChar
OpenProcess
OutputDebugStringA
ReadFile
RtlZeroMemory
SetFilePointer
Sleep
TerminateProcess
ExitProcess
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrlenA
VirtualAlloc

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
DeleteObject
SelectObject

gdiplus

GdipGetImageEncoders
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup

wsock32

htons
recv
send
socket
gethostbyname
connect
closesocket
WSAGetLastError
WSAAsyncSelect
WSAStartup

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

shlwapi

StrStrIA

Exports

Exports

Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f585788c79ceb2811e27ad2d0a2edd07

Headers

File Characteristics

Imports

user32

kernel32

gdi32

gdiplus

wsock32

advapi32

shlwapi

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 27KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 27KB

.reloc
Size: 2KB - Virtual size: 1KB