a073ea1cb56d4418a3e820f632b93c4df35c65f40a55586f6459b789b55f4682

Sharing

Copy URL Twitter E-mail

General

Target

a073ea1cb56d4418a3e820f632b93c4df35c65f40a55586f6459b789b55f4682
Size

33KB
MD5

60202fa9ba4405301aada04d39c1fd04
SHA1

4ecb5a51973684d97137b09dfb446f2e1c047878
SHA256

a073ea1cb56d4418a3e820f632b93c4df35c65f40a55586f6459b789b55f4682
SHA512

b5aa9d387d39f6845563f1c932cd211e8c9789a464cba21f18b91dc9640d2da12223e828ea3b2122f757ffdc1c77b20c95bb3394d6a2b28ef2e2678292305975
SSDEEP

768:R8WAW4+CwnipI/msS5pM7qUzyWR8WkAtul:R8K4+Cl5BUeG8W0l

Score

N/A

Malware Config

Signatures

Files

a073ea1cb56d4418a3e820f632b93c4df35c65f40a55586f6459b789b55f4682
.dll windows x86

ab0dab68cea82471bf33df142d45d018

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
LoadLibraryA
WideCharToMultiByte
ReadProcessMemory
GetTempPathA
SetThreadPriority
GetFileSize
ReadFile
CreateFileA
GetProcessHeap
HeapAlloc
WriteProcessMemory
VirtualProtect
OpenProcess
GetCurrentProcessId
GetModuleFileNameA
GetLastError
EnterCriticalSection
LeaveCriticalSection
IsBadReadPtr
InitializeCriticalSection
GetProcAddress
CloseHandle
GetModuleHandleA
VirtualProtectEx
InterlockedExchange
DeleteCriticalSection

msvcrt

strcat
_stricmp
_except_handler3
strchr
_vsnprintf
isspace
isalnum
wcscat
atoi
exit
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strcmpi
strrchr
wcsstr
wcslen
wcsncat
wcscpy
free
_strlwr
strstr
mbstowcs
wcscmp
malloc
strncpy
strlen
strcpy
__CxxFrameHandler
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy

gdiplus

GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup

gdi32

DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject

wsock32

closesocket
shutdown

user32

GetForegroundWindow
GetClassNameW
GetWindow
wsprintfA
FindWindowA
GetWindowTextA

Exports

Exports

DllMoveFile

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab0dab68cea82471bf33df142d45d018

Headers

File Characteristics

Imports

kernel32

msvcrt

gdiplus

gdi32

wsock32

user32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 1KB