75d74686af3f433049abad10314f28d9de9cf1ff041765f2b613f82d82ea2d15

General

Target

75d74686af3f433049abad10314f28d9de9cf1ff041765f2b613f82d82ea2d15
Size

48KB
MD5

2e76bcec1c741fc17caa7c2ee9e77307
SHA1

1ad45e273ad4283d98336f2844a0a828cc0b0ec2
SHA256

75d74686af3f433049abad10314f28d9de9cf1ff041765f2b613f82d82ea2d15
SHA512

a58eea6ee99114ddae75f858a5389580b113ec6983aa82b41805275bfc285ca78c7c671029adcc0a440da3bc454c07ec59ffb24c3be7dc50c6d189edae51a50c
SSDEEP

768:M+DqZbL8Hgl683Ov2iV3+8rWx/xx1VhbxJl8Jkn0XaSBLNkNdY7f6/R:MfPQ3LrWx/xzVRl822fBLN0dkf6

Score

N/A

Malware Config

Signatures

Files

75d74686af3f433049abad10314f28d9de9cf1ff041765f2b613f82d82ea2d15
.dll windows x86

a47bd0e92cb5afb1ec035ae6288b2fad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
VirtualProtect
GetProcAddress
LoadLibraryA
CopyFileA
GetSystemDirectoryA
GetLocalTime
TerminateThread
CreateThread
GetModuleFileNameA
WritePrivateProfileStringA
ExpandEnvironmentStringsA
GetTempPathA
GetVersionExA
GetPrivateProfileStringA
Sleep
GetTickCount
CloseHandle

user32

FindWindowExA
PostMessageA
IsWindowEnabled
GetWindow
EnumChildWindows
GetClientRect

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

msvcrt

_stricmp
_strnicmp
_adjust_fdiv
malloc
??3@YAXPAX@Z
srand
__CxxFrameHandler
rand
_vsnprintf
strstr
free
_initterm

ws2_32

gethostbyname
inet_addr
socket
recv
setsockopt
send
connect
sendto
closesocket
WSAStartup
htons

shlwapi

PathFindFileNameA

Exports

Exports

GetAdaptersAddresses
GetAdaptersInfo
GetBestInterface
GetIpAddrTable
GetIpForwardTable
waveOutGetNumDevs

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 946B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a47bd0e92cb5afb1ec035ae6288b2fad

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

ws2_32

shlwapi

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 896B

.reloc Size: 4KB - Virtual size: 946B

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 896B

.reloc
Size: 4KB - Virtual size: 946B