eb77f0a5af9df6978aaa3855a204bed1703443064da6ec0a77ec5e73774bbc39

Sharing

Copy URL

Twitter E-mail

General

Target

eb77f0a5af9df6978aaa3855a204bed1703443064da6ec0a77ec5e73774bbc39
Size

72KB
MD5

78d59f7bef9b0767c6f4c40f7bd3c234
SHA1

a772da7b7127eb6a9a562125db934bed23fa5d2f
SHA256

eb77f0a5af9df6978aaa3855a204bed1703443064da6ec0a77ec5e73774bbc39
SHA512

256752f4678bedf2591bc989ea1b716ccec8e12ecbc77ed70453eb74688b64758c7ead51bbeca9a66e4eb5b1947239bae9b70873a82c6faabc069bae1b208034
SSDEEP

1536:U6MauNWZQ8SZQPwml0UO3xxAstebLCOiXO:knhZYZCB3xxAstebLBi

Score

N/A

Malware Config

Signatures

Files

eb77f0a5af9df6978aaa3855a204bed1703443064da6ec0a77ec5e73774bbc39
.exe windows x86

0dab57a26d52d1dd5e8ccc66cf4a9767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
sprintf
fabs
ceil
malloc
floor
free
fclose
strlen
strcpy
strcat

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
InitializeCriticalSection
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CloseHandle
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
WriteFile
CreateFileA
SetFilePointer
HeapReAlloc

comctl32

InitCommonControls
InitCommonControlsEx

user32

DestroyWindow
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetWindowRect
GetSystemMetrics
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
DestroyIcon
FillRect

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteExA

ole32

RevokeDragDrop
CoInitialize

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dab57a26d52d1dd5e8ccc66cf4a9767

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

shell32

ole32

wsock32

Sections

.code Size: 50KB - Virtual size: 50KB

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 239B

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 50KB - Virtual size: 50KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 239B

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 700B