82f649663c1c66b473d5f480eb1e99f4f7067bd2e706786171f51d579320d92c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82f649663c1c66b473d5f480eb1e99f4f7067bd2e706786171f51d579320d92c
Size

10KB
MD5

3b3321e2481a096ef994f626130ceeab
SHA1

39806e9fca352028d412486253ac03a100e68f87
SHA256

82f649663c1c66b473d5f480eb1e99f4f7067bd2e706786171f51d579320d92c
SHA512

28c0922c93792b580a37e6d8d33d193461a09c5db0456eef4ce2ae55a704fca81546099f5b6713759072cf1d09f1dc3b3e5af4bd5977b94fd7934eb6e43d37dd
SSDEEP

192:j6Lg/OSp/QtxDJYqkoo7FVQ43tqpO/VGsrY1Y12MBLMQdjgNpNk2Ski1x:72Sp/QtxDWq6RVhtJgmY1i2MBL6

Score

N/A

Malware Config

Signatures

Files

82f649663c1c66b473d5f480eb1e99f4f7067bd2e706786171f51d579320d92c
.dll windows x86

4f59a1e37a3ab8db3610d4448a0a616e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualProtect
CloseHandle
CompareStringA
IsBadReadPtr
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GlobalAlloc
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
lstrlenA
GlobalFree
GetCurrentProcessId
GetTickCount
CreateThread
GetPrivateProfileStringA
ExitProcess
Thread32Next
TerminateThread
Thread32First
GetCurrentProcess
Sleep

user32

wsprintfA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowsHookExA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ