adf1cb2555e270278f2d1ba4527c7cb9dac4c95344f850ef196f267333c480a5

General

Target

adf1cb2555e270278f2d1ba4527c7cb9dac4c95344f850ef196f267333c480a5
Size

29KB
MD5

e549f9fa8d9094bee6396ad47647b8ae
SHA1

66bcce2d95d362b47879239d8055f331acb5dca7
SHA256

adf1cb2555e270278f2d1ba4527c7cb9dac4c95344f850ef196f267333c480a5
SHA512

e870c4de502140f1d9cb375898210b9ca00b74a3fd5ecf5642e1ba2a8896cb77037bc75ffb8c4ec192fc9937e399ade5c47fbfa0e19746b67fe10f4f03e74cda
SSDEEP

768:b7Sv/XCfoHkkS9b0+F+OZ0EBJgqyMe7JxS5BBQARQkCHfRX4Q:b7SXSfxX9Lte7JxIBBQARy/

Score

N/A

Malware Config

Signatures

Files

adf1cb2555e270278f2d1ba4527c7cb9dac4c95344f850ef196f267333c480a5
.dll windows x86

7fda3f656685fa4ee8eedbd6f93992af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_snprintf
RtlZeroMemory
RtlUnwind
memcmp
memcpy
strlen
strstr

ws2_32

gethostname

kernel32

DeleteFileA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
GetCurrentDirectoryA
GetPrivateProfileStringA
IsBadReadPtr
lstrcmpA
CreateFileA
CreateFileMappingA
CreateProcessA
ReadFile
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
LoadLibraryA
MapViewOfFile
MoveFileExA

user32

wsprintfA
UnhookWindowsHookEx
SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
CallNextHookEx
GetWindowThreadProcessId
FindWindowA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fda3f656685fa4ee8eedbd6f93992af

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 22KB - Virtual size: 22KB

.bss Size: - Virtual size: 12B

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 730B

.text
Size: 22KB - Virtual size: 22KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 730B