9a87d7f3e75b45fcdf1d68b83a4ec980a1203ea446508f2ba6ef9f4d2aefe84c

General

Target

9a87d7f3e75b45fcdf1d68b83a4ec980a1203ea446508f2ba6ef9f4d2aefe84c
Size

35KB
MD5

923c94f37c02239bac278315321381e6
SHA1

9263c4a65e21add764e6719e4c0c5bdbeb2d9a31
SHA256

9a87d7f3e75b45fcdf1d68b83a4ec980a1203ea446508f2ba6ef9f4d2aefe84c
SHA512

f48be0bd645480d66f0ffc3ec8e1319eef212881dece53457e1fff712538566701b272eaa0094229b7ae06a9ef61b961b6c9a7c70c03c8ec7065ed2e464e5e76
SSDEEP

192:Lr2K7cNG/mJohDcHiYsI0HsauZR3/am1kFmO06HHcqu2d2Wrq30JSLRrbkTTFr3Y:EWqHqxcRPam1GMqu2Emq84OTxc

Score

N/A

Malware Config

Signatures

Files

9a87d7f3e75b45fcdf1d68b83a4ec980a1203ea446508f2ba6ef9f4d2aefe84c
.dll windows x86

cdd77e0b77a56ab27ff72410835527af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetWindowsDirectoryA
GetProcAddress
Sleep
CreateFileA
lstrcatA
ReadFile
GetCurrentProcessId
GetModuleHandleA
LocalAlloc
GetModuleFileNameA
CreateThread
Module32Next
Module32First
lstrlenW
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadProcessMemory
OpenProcess
VirtualProtectEx
VirtualProtect
WriteProcessMemory
CreateToolhelp32Snapshot
CloseHandle

user32

wsprintfA
EnumWindows
GetWindowThreadProcessId

advapi32

CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext

shlwapi

StrStrIA

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

msvcrt

strstr
_except_handler3
strrchr
_purecall
isprint
strncat
_itoa
??2@YAPAXI@Z
memset
strcpy
memcpy
??3@YAXPAX@Z
strlen

Exports

Exports

ftsWordBreak
o0yfsUseGDIWidthCache
o1y3sInitialize
o2y3sTabbedoyno
o3y4sDllInitialize
o4y5sDrawTextEx
o5y6sEditControl
o6y7sExtoyno
o7y8sGetCharacterPlacement
o8y9sGetTextExtentExPoint
o9y0sPSMoyno

Sections

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shard
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdd77e0b77a56ab27ff72410835527af

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

msvcrt

Exports

Exports

Sections

.bss Size: - Virtual size: 16KB

.data Size: 19KB - Virtual size: 19KB

shard Size: 12KB - Virtual size: 11KB

.reloc Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 16KB

.data
Size: 19KB - Virtual size: 19KB

shard
Size: 12KB - Virtual size: 11KB

.reloc
Size: 2KB - Virtual size: 2KB