267228c380fd40d949e6d5804d8c1ea3c83220f088be603a3a2d806146e2e036

Sharing

Copy URL Twitter E-mail

General

Target

267228c380fd40d949e6d5804d8c1ea3c83220f088be603a3a2d806146e2e036
Size

15KB
MD5

9c2e9b084d94a0cd0d8a241223102c73
SHA1

b64f9156b635adb677a006ba7ec113f253f4a1e8
SHA256

267228c380fd40d949e6d5804d8c1ea3c83220f088be603a3a2d806146e2e036
SHA512

1d6d0570ca17a32474c0cd915a0dea7330e63aa9bf8d1a924e298b0d761e85055cc51c1de80e500dfeaba8e098a0cfa48b999aa8fb3f379500f68fa8687d43cc
SSDEEP

384:bOO08xolyh1fx8Md++UogyUeUcSgtWYA2IWB:bE8xiifxHobo82

Score

N/A

Malware Config

Signatures

Files

267228c380fd40d949e6d5804d8c1ea3c83220f088be603a3a2d806146e2e036
.dll windows x86

081b520ebcae8858685391fa0e0bf3ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
TerminateThread
CreateThread
WaitForSingleObject
GetProcAddress
LoadLibraryA
GetTempPathA
WinExec
CloseHandle
Sleep
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
lstrcatA
ExitProcess
lstrcpyW
GetModuleHandleA
FreeLibrary

user32

MessageBoxA
wsprintfA

shlwapi

PathFileExistsA

ws2_32

closesocket
inet_ntoa
WSAStartup
WSAGetLastError
recvfrom
sendto
socket
htons
ntohs
inet_addr

msvcrt

_stricmp
_itoa
atoi
strncpy
strtok
time
srand
rand
malloc
sprintf

Exports

Exports

LpkPresent
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem
UspsddsdleUspFXtoCpTwo

Sections

.Ccosd
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081b520ebcae8858685391fa0e0bf3ee

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

ws2_32

msvcrt

Exports

Exports

Sections

.Ccosd Size: 7KB - Virtual size: 6KB

.data Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 630B

.Ccosd
Size: 7KB - Virtual size: 6KB

.data
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 630B