9eef6a62e6d8da36fbae3840250e92b6ff23ccc17227e249b69bb328e3a9a97b

General

Target

9eef6a62e6d8da36fbae3840250e92b6ff23ccc17227e249b69bb328e3a9a97b
Size

44KB
MD5

2ed254e99da4d597cb661028924699a0
SHA1

29be1ebcb2f7582261167f8e4d0677a80b0a3f61
SHA256

9eef6a62e6d8da36fbae3840250e92b6ff23ccc17227e249b69bb328e3a9a97b
SHA512

3b333cdd0c29462e8b03ab018adf13dfa91eb69ca42a4759f5b377e438e77092dfdb03f4a053860ea30b3baa23134709ac07f8d11cb1959433f4ae41b1879cec
SSDEEP

768:Cf17CkhiHWFA6NzxjNLaOtcwfUXN/rMekoQpBBQARQknElAk:q17zXN4TMekoQpBBQAR0

Score

N/A

Malware Config

Signatures

Files

9eef6a62e6d8da36fbae3840250e92b6ff23ccc17227e249b69bb328e3a9a97b
.dll windows x86

04736d883c6a00309bc1a9500e3179a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

sscanf
RtlNumberGenericTableElements
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlGetElementGenericTable
RtlDeleteElementGenericTable
memcpy
_snprintf
RtlZeroMemory
RtlUnwind
ZwQuerySystemInformation
memcmp
strlen
strstr

kernel32

WideCharToMultiByte
SuspendThread
OpenThread
MoveFileExA
MapViewOfFile
IsBadReadPtr
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
GetStartupInfoA
lstrcpynA
WriteFile
VirtualProtectEx
VirtualFree
VirtualAlloc
GlobalAlloc
GlobalFree
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetPrivateProfileStringA
GetLastError
CreateFileA
GetFileSize
ReadFile
CreateFileMappingA
CreateProcessA
DeleteFileA
GetCurrentProcessId
GetExitCodeThread
UnmapViewOfFile

user32

wsprintfA
GetWindowThreadProcessId
KillTimer
RegisterWindowMessageA
SendMessageA
SetTimer
UnhookWindowsHookEx

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04736d883c6a00309bc1a9500e3179a3

Headers

File Characteristics

Imports

ntdll

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 27KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 886B

.text
Size: 28KB - Virtual size: 27KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 886B