bebb72bd4b163cbea9871662616dec595180886b5e64b7002ced5c185ba7d059

Sharing

Copy URL

Twitter E-mail

General

Target

bebb72bd4b163cbea9871662616dec595180886b5e64b7002ced5c185ba7d059
Size

159KB
MD5

2e2c1d6fb1dbe7b9fbbad8edb825586a
SHA1

bea13d13f941597facc3d27d28ad558abbb9c8a0
SHA256

bebb72bd4b163cbea9871662616dec595180886b5e64b7002ced5c185ba7d059
SHA512

e1ae1f13a7ff5e32d19c91fae3f0aa049022c25c94f7989e56a89876c07b677c168f7ff2888e5b07071ae178eb9d0b0a1291bb4b26d40c410f1993866c67e0a8
SSDEEP

3072:vlxDF2MAP/JEhMCra2RTGPuYIrSOht/YzdTlIhZO7VrMYN6OG9ssjor:vlxDGP/JEhMCmFWYIrSOhlWdgZO7R3sE

Score

N/A

Malware Config

Signatures

Files

bebb72bd4b163cbea9871662616dec595180886b5e64b7002ced5c185ba7d059
.dll windows x86

c81ee7b8b52723c92a2f698068bc67a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentThreadId
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

advapi32

RegSetValueExA

gdi32

StretchDIBits

user32

mouse_event
MessageBoxA

shell32

ShellExecuteA

avicap32

capGetDriverDescriptionA

wsock32

WSACleanup

Exports

Exports

ServiceMain

Sections

CODE
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c81ee7b8b52723c92a2f698068bc67a7

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

shell32

avicap32

wsock32

Exports

Exports

Sections

CODE Size: - Virtual size: 75KB

DATA Size: - Virtual size: 14KB

BSS Size: - Virtual size: 2KB

.idata Size: - Virtual size: 4KB

.edata Size: - Virtual size: 76B

.vmp0 Size: - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 216B

.vmp1 Size: - Virtual size: 59KB

.vmp2 Size: 157KB - Virtual size: 156KB

.reloc Size: 512B - Virtual size: 228B

CODE
Size: - Virtual size: 75KB

DATA
Size: - Virtual size: 14KB

BSS
Size: - Virtual size: 2KB

.idata
Size: - Virtual size: 4KB

.edata
Size: - Virtual size: 76B

.vmp0
Size: - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 216B

.vmp1
Size: - Virtual size: 59KB

.vmp2
Size: 157KB - Virtual size: 156KB

.reloc
Size: 512B - Virtual size: 228B