5aeaf74faf22ec41000cc73664a631dc8749584a084403e6c903fda3a0e56fa0

Sharing

Copy URL Twitter E-mail

General

Target

5aeaf74faf22ec41000cc73664a631dc8749584a084403e6c903fda3a0e56fa0
Size

49KB
MD5

6bdd83963e9768729e2063603acda5d0
SHA1

2884af0f0b8375ec791d1c7e255ae8143b192127
SHA256

5aeaf74faf22ec41000cc73664a631dc8749584a084403e6c903fda3a0e56fa0
SHA512

0656eab4f25a85ad9f3d98eb114878dd170f4d316ec10702eafd4727b1da1ffa98cd73371930597cdb0994b972e4973aad51efe769f68f1bc665858217dabc8a
SSDEEP

768:aCDlRInSTu6xpi9Hk+o4xTTWVWWwBHt3HOgiHFEkOlZCYLtfo85q:aLSTVOkz4xTTWKteB2kOl7lo8U

Score

N/A

Malware Config

Signatures

Files

5aeaf74faf22ec41000cc73664a631dc8749584a084403e6c903fda3a0e56fa0
.dll windows x86

c8bf43826d3943b2eea961ec88d9c3f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsFree
GetModuleHandleA
CreateThread
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
VirtualProtect
FlushInstructionCache
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc

user32

RegisterWindowMessageA
IsWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
SendMessageA
DestroyWindow
UnregisterClassA
RegisterClassA
MessageBoxA
CreateWindowExA
GetMessageA

wsock32

ntohs
inet_addr
getpeername
getsockname
send

Exports

Exports

GetFilterState
SetClientHwnd
SetFilter
SetFilterState
SetLoggingActi
SetTargetPid

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WPEPRO_
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8bf43826d3943b2eea961ec88d9c3f0

Headers

File Characteristics

Imports

kernel32

user32

wsock32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 13KB

.WPEPRO_ Size: 120KB - Virtual size: 118KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 13KB

.WPEPRO_
Size: 120KB - Virtual size: 118KB

.reloc
Size: 8KB - Virtual size: 5KB