d6cff12ce77f5202c8ed5d9a934001e40cfda1e8e6cd10fbda1c4d0b95ee634b

Sharing

Copy URL Twitter E-mail

General

Target

d6cff12ce77f5202c8ed5d9a934001e40cfda1e8e6cd10fbda1c4d0b95ee634b
Size

101KB
MD5

ccaf9467bc3a9b6af0ab84b9b2bb7d54
SHA1

302ad5f186e37ac582955ea789f4e875bf84a7b6
SHA256

d6cff12ce77f5202c8ed5d9a934001e40cfda1e8e6cd10fbda1c4d0b95ee634b
SHA512

1c2bae1a249b2ceef5e7f453a0d35e05df0d7ba5616a8e98900478b407d5e256e1d1eb47e35afee707d5493286b5c728d20daa3a3330d312b48aca0a45049b27
SSDEEP

1536:zwHvUCGRegHdtR/nf1lGAcC9Rx9cI22+fVvyV9whjLwBDdXV:zUvMpdtDcex9/2lVvy/whjLwBDr

Score

N/A

Malware Config

Signatures

Files

d6cff12ce77f5202c8ed5d9a934001e40cfda1e8e6cd10fbda1c4d0b95ee634b
.dll windows x86

0234ceb3b5853a9cccf14b289ea30dbf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
TerminateThread
Sleep
ResumeThread
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetLastError
ResetEvent
InterlockedExchange
CancelIo
GetTickCount
HeapAlloc
GetProcessHeap
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalAlloc
GetFileSize
ReadFile
MoveFileA
lstrcmpiA
Process32First
MapViewOfFile
CreateFileMappingA
HeapFree
UnmapViewOfFile
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
WaitForMultipleObjects
LocalSize
TerminateProcess
GlobalMemoryStatus
GetVersionExA
OpenEventA
GetCurrentProcess
SetFileAttributesA
CopyFileA
ExpandEnvironmentStringsA
GetModuleFileNameA
RaiseException

msvcrt

ceil
_ftol
strlen
strstr
memcmp
_CxxThrowException
rand
strcpy
sprintf
strncpy
free
malloc
_except_handler3
putchar
strcat
strrchr
_beginthreadex
atoi
wcstombs
_access
srand
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
memmove
__CxxFrameHandler
memcpy
puts
??3@YAXPAX@Z
strcmp
??2@YAPAXI@Z
memset
_strrev
_stricmp

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

Exports

Exports

EndWork
Runing
Working
fuckabc

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0234ceb3b5853a9cccf14b289ea30dbf

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB