877c2b70f2ce1061e4b37f5c3569c1a8d61c48d29fc828c558bf8114a39702ce

General

Target

877c2b70f2ce1061e4b37f5c3569c1a8d61c48d29fc828c558bf8114a39702ce
Size

104KB
MD5

692194dc5fdd82d2626ba22e60995d68
SHA1

403bb50a04dd2c1c3239a0c7f6397865c4d7ef09
SHA256

877c2b70f2ce1061e4b37f5c3569c1a8d61c48d29fc828c558bf8114a39702ce
SHA512

18112a873d1e448effe6bc31bc8a53af9cf522406fd929dd6e78bf9ce63721d564986d454880e0368f0a93905c96a6e84778e61c9b05eb93bd85df664e6ca1c1
SSDEEP

3072:baLGFtPu7+i0QYLArHjREECVgPHfcHQo:JtVQUcdEFGPH0HQ

Score

N/A

Malware Config

Signatures

Files

877c2b70f2ce1061e4b37f5c3569c1a8d61c48d29fc828c558bf8114a39702ce
.dll windows x86

da7933193ef10b1e4150471ff0b2c58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
InitiateSystemShutdownExA

gdi32

GetStockObject

kernel32

GetProcAddress
Sleep
LoadLibraryA
VirtualAlloc

user32

LoadCursorA
RegisterClassA
CreateWindowExA
LoadIconA
DefWindowProcA
DestroyWindow

fsk

fxGetHostData
fxToBoolean
fxCheckArg
FskMemPtrDispose
fxCallID
fxInteger
fxBeginHost
fxToInteger
FskECMAScriptThrowIf
fxSetID
fxTest
FskListMutexDispose
FskListMutexPrepend
FskThreadGetCurrent
FskMemPtrNewClear
FskMutexRelease
FskListRemove
FskListContains
FskMutexAcquire
FskThreadPostCallback
FskListMutexAppend
FskListMutexNew
FskListMutexRemove
FskMemPtrNew
fxSetHostData
fxOverflow
fxNewInstanceOf
fxID
fxPutID
fxNewHostObject
fxNewHostConstructor
fxNewHostFunction
fxBoolean
fxEndHost

msvcr71

_onexit
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_except_handler3
_setjmp3

Exports

Exports

fskGrammar
fskLoad
fskUnload

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da7933193ef10b1e4150471ff0b2c58c

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

fsk

msvcr71

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 572B

.rsrc Size: 94KB - Virtual size: 94KB

.reloc Size: 512B - Virtual size: 450B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 572B

.rsrc
Size: 94KB - Virtual size: 94KB

.reloc
Size: 512B - Virtual size: 450B