d792f02ab2a32f02db28845a75196fba9def87225872ba61dfb79525680eb434

General

Target

d792f02ab2a32f02db28845a75196fba9def87225872ba61dfb79525680eb434
Size

30KB
MD5

7e9ec283fe9c1d15f0da8fed87a8ce00
SHA1

76fe713b052a9bb21ce77556fb758b3291fef63d
SHA256

d792f02ab2a32f02db28845a75196fba9def87225872ba61dfb79525680eb434
SHA512

d43e9c77f13b1edfd608609f1453b39abb9bba7d039c498d72684b229130a8fadebe38a778a9855c289a74db9820439cb44e23ea283a9804d1204c77f259ef98
SSDEEP

768:kj98LSRjlWpdH9eH57cIB1xReFfuvH69aMN09XhAU3e:kj95sTdIBvRUfuvxMN0LAU3

Score

N/A

Malware Config

Signatures

Files

d792f02ab2a32f02db28845a75196fba9def87225872ba61dfb79525680eb434
.dll windows x86

04955b207dd95a63edaaf9a2eaac19fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetVersionExA
DeleteFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
ExitThread
TerminateThread
WaitForMultipleObjects
lstrcatA
CreateMailslotA
GetModuleFileNameA
WaitForSingleObject
IsBadReadPtr
ReadFile
lstrlenA
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
GetFileAttributesA
GetCurrentProcessId
GetLastError
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ReleaseMutex
CreateEventA
CreateMutexA
CreateThread
OpenProcess
lstrcmpA
ResetEvent
CompareStringA
GetConsoleCP
GetCurrentThreadId
CreateFileA
WriteFile
SetEndOfFile
SetFilePointer
SetEvent

user32

wsprintfA

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
HttpSendRequestA

iphlpapi

GetAdaptersInfo

advapi32

RegSetValueExA
RegCloseKey
OpenProcessToken
CreateProcessAsUserA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegNotifyChangeKeyValue
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
RegQueryValueExA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04955b207dd95a63edaaf9a2eaac19fc

Headers

File Characteristics

Imports

kernel32

user32

wininet

iphlpapi

advapi32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB