af32b465240a3d961d704f9aaffd83735c3653c11df2298166f2d8b923c81a3e

Sharing

Copy URL Twitter E-mail

General

Target

af32b465240a3d961d704f9aaffd83735c3653c11df2298166f2d8b923c81a3e
Size

124KB
MD5

00dbe8097edf953f5d830b98a54061ec
SHA1

dce59fbcdd020a1f39c62b05dccdc883361dfaa0
SHA256

af32b465240a3d961d704f9aaffd83735c3653c11df2298166f2d8b923c81a3e
SHA512

a622152b953eaaf8c31a81c74c33e4353902710f4035d94b76b5776f075c8e51f1f71cefdeeb5fe6db353e9cd0af815f5f8599786e1de4ff4062333509a25726
SSDEEP

1536:bPNIXtnU9B7Q24sLT38C1S9ygb2QRKmT/WkVP4ZJRjeb763pzOY8Got4I/c:bPNIX1U9B7usv3/l5A1VSK6dOY8GotS

Score

N/A

Malware Config

Signatures

Files

af32b465240a3d961d704f9aaffd83735c3653c11df2298166f2d8b923c81a3e
.dll windows x86

83428f997d4c908aed964843f51f1d39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
SleepEx
CreateThread
EnterCriticalSection
OpenMutexA
CreateMutexA
InitializeCriticalSection
InterlockedIncrement
ReleaseMutex
WaitForSingleObject
DeleteCriticalSection
InterlockedDecrement
HeapFree
HeapAlloc
HeapReAlloc
MoveFileExA
GetSystemDirectoryA
TlsSetValue
GetLastError
CreateSemaphoreA
GetSystemInfo
CreateIoCompletionPort
WaitForMultipleObjects
PostQueuedCompletionStatus
ReleaseSemaphore
ResetEvent
WaitForSingleObjectEx
OutputDebugStringA
GetQueuedCompletionStatus
GlobalAlloc
GlobalFree
TlsFree
TlsAlloc
TlsGetValue
Sleep
WideCharToMultiByte
GetProcAddress
LoadLibraryA
LoadLibraryW
ExpandEnvironmentStringsW
HeapCreate
HeapDestroy
FreeLibrary
LCMapStringW
LCMapStringA
ExitThread
CloseHandle
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateFileA
SetFilePointer
SetStdHandle
InterlockedExchange
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
SetLastError
FlushFileBuffers
WriteFile
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr

user32

wsprintfA
DestroyWindow
TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
IsWindow

gdi32

GetStockObject

ws2_32

WSASetLastError
ntohs
htons
inet_addr
WSAGetLastError
WPUCompleteOverlappedRequest
WSCEnumProtocols
WSCGetProviderPath
gethostbyname

winmm

timeGetTime

Exports

Exports

DllMain
WSPStartup

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83428f997d4c908aed964843f51f1d39

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

winmm

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 76KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 17KB

.shared Size: 4KB - Virtual size: 4B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 76KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 17KB

.shared
Size: 4KB - Virtual size: 4B

.reloc
Size: 12KB - Virtual size: 8KB