7e378d438e13f18ea3bc9168239783df8008fa06ccec7081700e6f1715ff1a5b

Sharing

Copy URL

Twitter E-mail

General

Target

7e378d438e13f18ea3bc9168239783df8008fa06ccec7081700e6f1715ff1a5b
Size

121KB
MD5

9b552754c3cccc7598090b57312282d0
SHA1

37f60d3f7a7d87429616db81ee374f27e2fcde22
SHA256

7e378d438e13f18ea3bc9168239783df8008fa06ccec7081700e6f1715ff1a5b
SHA512

4600c42a60d97d5d899492b585ea1d8f4612e59fb925fe00756518c697e35e37558c0bd7fb23c6478bcfa24afe0daa075431120d4a8f4b778c0568be94c7ca62
SSDEEP

3072:AKXGgb7muzAWwfoWfzu/HRtoGWSnDjhiOPm3oV/:lbbyuzAWwfVuRt79XhiOB/

Score

N/A

Malware Config

Signatures

Files

7e378d438e13f18ea3bc9168239783df8008fa06ccec7081700e6f1715ff1a5b
.dll windows x86

5fcd34819f056f816ebb9e28a4b3c00b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCurrentProcess
CreatePipe
WriteFile
ReadFile
GlobalSize
CreateProcessA
TerminateProcess
GetSystemDirectoryA
TerminateThread
DeleteFileA
lstrcpynA
CreateFileA
lstrlenA
lstrcmpA
GetExitCodeThread
CloseHandle
Sleep
GetProcessHeap
HeapAlloc
GetCurrentProcessId
CreateThread
SetEvent
WaitForSingleObject
OpenEventA
HeapReAlloc
HeapFree
SetFilePointer
TlsGetValue
MultiByteToWideChar
SetStdHandle
InterlockedIncrement
InterlockedDecrement
LCMapStringW
LCMapStringA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
RtlUnwind
GetLastError
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
IsBadReadPtr
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleHandleA
ExitProcess
GetFileAttributesA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetProcAddress
FlushFileBuffers
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter

user32

GetActiveWindow
ReleaseDC
GetWindowRect
GetDC
GetDesktopWindow
wsprintfA
MessageBoxA

gdi32

CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
BitBlt
GetObjectA
GetDIBits
SelectObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ws2_32

getsockname
listen
accept
gethostbyname
htons
socket
connect
__WSAFDIsSet
getsockopt
bind
ntohs
select
recv
send
WSAStartup
WSACleanup
inet_addr
closesocket
setsockopt

Exports

Exports

dwInjectionThreadId

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

InjShare
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fcd34819f056f816ebb9e28a4b3c00b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 87KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 20KB - Virtual size: 25KB

InjShare Size: 512B - Virtual size: 4B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 20KB - Virtual size: 25KB

InjShare
Size: 512B - Virtual size: 4B

.reloc
Size: 5KB - Virtual size: 5KB