821de829820bd3d6569ef94132f2ffd96e7a139d1af36031d7d02598573b62d8

General

Target

821de829820bd3d6569ef94132f2ffd96e7a139d1af36031d7d02598573b62d8
Size

40KB
MD5

4ae6c43fc5d86114580463bd34d342b9
SHA1

0edf1341f7b0607c2dd627e849fad4a8a27d5c13
SHA256

821de829820bd3d6569ef94132f2ffd96e7a139d1af36031d7d02598573b62d8
SHA512

6a0dc62e95808b0aa53967bfeb9c8c389f77365523a10d896db521a4006c0b80adb4089a4a93a6b12668fb6ad04927d7435905450a951125adcc8f76e62161ba
SSDEEP

768:K0OPoXdAgDk5CYvMkf9fcAkXWtBOIevVSGPS9bBBQARQkREeM:3OPoNTDkUtcSSGPS9bBBQAR

Score

N/A

Malware Config

Signatures

Files

821de829820bd3d6569ef94132f2ffd96e7a139d1af36031d7d02598573b62d8
.dll windows x86

f6fad8fc5e16843dcffbe58916bf4acc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcmp
memcpy
strlen
strstr
_snprintf
RtlZeroMemory
RtlUnwind

ws2_32

closesocket
gethostname

kernel32

IsBadReadPtr
GetStartupInfoA
GetLastError
GetFileSize
GetExitCodeThread
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
CloseHandle
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
WritePrivateProfileStringA
lstrcatA
lstrcmpiA
lstrcpynA
lstrlenA
DeleteFileA
lstrcmpA
lstrcpyA
CreateFileMappingA
CreateFileA
GetTempPathA
MapViewOfFile
MoveFileExA
GetTempFileNameA

user32

SetTimer
MapVirtualKeyA
GetKeyboardState
KillTimer
wsprintfA
UnhookWindowsHookEx
CallNextHookEx
GetWindowThreadProcessId
RegisterWindowMessageA
SendMessageA
ToAscii

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6fad8fc5e16843dcffbe58916bf4acc

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 732B

.text
Size: 24KB - Virtual size: 23KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 732B