2f937175c965ca32a37c62e2e4423546063668191a219f53d5412597e197bf74

General

Target

2f937175c965ca32a37c62e2e4423546063668191a219f53d5412597e197bf74
Size

96KB
MD5

412c6e5dcf84a95dce88db89f2e20970
SHA1

18655e66d8d7195eacc5fa4225496546d5b32531
SHA256

2f937175c965ca32a37c62e2e4423546063668191a219f53d5412597e197bf74
SHA512

c998ddbe6d8451161dee0e8a41f9f88e7e8b457f9172129d4f6c7001d037fc288fb7a05542f3950679d74b0de70a8f17519e3f6c0b1956149b366fd0732cd834
SSDEEP

768:5+R0Skc5Pk29YzWru+wKHkEFjIafWjMBeTcmCTvifJKzhuOQsZcXlfXO705jjA3p:85sorwWjNI1CTviBKaHV5sI8oKaoq

Score

N/A

Malware Config

Signatures

Files

2f937175c965ca32a37c62e2e4423546063668191a219f53d5412597e197bf74
.dll windows x86

1440054a713cc858c558c14861c36032

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
GetCurrentProcessId
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
CloseHandle
Sleep
ReadFile
SetStdHandle
GetOEMCP
CreateThread
OpenProcess
GetCurrentProcess
GetPrivateProfileStringA
GetACP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
GetCPInfo

user32

UnhookWindowsHookEx
GetWindowTextA
GetClassNameA
GetForegroundWindow
GetWindowThreadProcessId

ws2_32

send
WSACleanup
connect
inet_addr
htons
socket
WSAStartup
recv

psapi

GetModuleFileNameExA

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1440054a713cc858c558c14861c36032

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

psapi

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 20KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 20KB

.reloc
Size: 8KB - Virtual size: 6KB