af8c3fb3d0a4906d12892b130a5013746f7efff32d9c4ff052db6d804aded786 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8c3fb3d0a4906d12892b130a5013746f7efff32d9c4ff052db6d804aded786
Size

16KB
MD5

dfd611661852d5129ce7d5f92b9d67d4
SHA1

2af4c27b6d55b64389e9c26dc7b815a5e5a5177c
SHA256

af8c3fb3d0a4906d12892b130a5013746f7efff32d9c4ff052db6d804aded786
SHA512

0c04cbf82f0f63d1076cc4d64d4d0cf57f74dcdfa8bea8f2892e9f4956d229fd43607419ebeaab65e270c570a4ab281cf72a61b6916f97da3772c594eb6be9d6
SSDEEP

192:PKclXBC1rQXmKprm9cwby10uSWIhEVeL/xLZjnflAv:ycpSjKUByyFAe7xdr0

Score

N/A

Malware Config

Signatures

Files

af8c3fb3d0a4906d12892b130a5013746f7efff32d9c4ff052db6d804aded786
.dll windows x86

5642313ac88ceb59f17eefb50235e537

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowThreadProcessId
GetKeyboardState
GetAsyncKeyState
FindWindowA
wsprintfA

kernel32

IsBadReadPtr
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
CloseHandle
CopyFileA
CreateRemoteThread
CreateThread
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
RtlUnwind
LoadLibraryA
OpenProcess
ReadProcessMemory
RtlZeroMemory
SetThreadPriority
Sleep
TerminateThread
VirtualAllocEx
WriteProcessMemory
MultiByteToWideChar

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ