c78390bf868d93683f42a9f6523f94e97b428cfdb760ea4f310b1c28bc1fba11

Sharing

Copy URL Twitter E-mail

General

Target

c78390bf868d93683f42a9f6523f94e97b428cfdb760ea4f310b1c28bc1fba11
Size

64KB
MD5

854076103c0a6f7b63b4a1dfdc1d6450
SHA1

64dcf7e4e17a166b4dcaade187e3daf922d5dae2
SHA256

c78390bf868d93683f42a9f6523f94e97b428cfdb760ea4f310b1c28bc1fba11
SHA512

2bbb9807a75fc8fa32cfc3f3289aa58a1ac5b01a54c4a0fcac5d2ee2bed5280f10c025ab0d5777eb5aabe640fe4dc9a1efd5ea051b3d25f65a04c0ef84cdca82
SSDEEP

768:/fDqQWdHpHTiHJ9z1gRKI9J1AoDf3Jyg9i+GoRj:TqhH9GHjzSIAQg9ioR

Score

N/A

Malware Config

Signatures

Files

c78390bf868d93683f42a9f6523f94e97b428cfdb760ea4f310b1c28bc1fba11
.dll windows x86

f80762e1c0520a2519551001d625617e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetCommandLineA
GlobalFree
GlobalAlloc
ReadFile
GetFileSize
GetLocalTime
DeleteFileA
CreateEventA
EnterCriticalSection
WaitForSingleObject
SetLastError
WritePrivateProfileStringA
ResumeThread
SuspendThread
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
GetTickCount
VirtualQuery
Sleep
InterlockedCompareExchange
GetPrivateProfileStringA
MoveFileA
LoadLibraryA
GetSystemDirectoryA
CreateFileA
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
VirtualProtect
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
lstrcmpiA
SetEvent

user32

GetMessageA
DispatchMessageA
PostMessageA
IsWindow
RegisterClassExA
LoadCursorA
UnregisterClassA
GetClassNameA
SystemParametersInfoA
SetWindowsHookExA
CallNextHookEx
GetKeyboardState
ToAscii
SetWindowLongA
GetWindowThreadProcessId
GetForegroundWindow
GetWindowRect
GetParent
EnumChildWindows
GetWindowLongA
FindWindowA
GetKeyState

gdi32

DeleteObject
GetDeviceCaps
CreateDCA
SetDIBitsToDevice
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC

imm32

ImmInstallIMEA
ImmUnlockIMC
ImmLockIMC

wsock32

send
socket
connect
closesocket
WSAStartup
recv

msvcrt

sprintf
strcpy
memcpy
_strcmpi
_except_handler3
strcat
strlen
_beginthreadex
strcmp
memset
memcmp
sscanf
strstr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

CandWndProc
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
Load
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f80762e1c0520a2519551001d625617e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

imm32

wsock32

msvcrt

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 8KB - Virtual size: 8KB