cfa0d59ebae84c10e974d835cc843fa75a3ed8cff0ee96da0d70e45b72ec62f0

General

Target

cfa0d59ebae84c10e974d835cc843fa75a3ed8cff0ee96da0d70e45b72ec62f0
Size

25KB
MD5

8fd9b022390496e374f68423063e481c
SHA1

908876e5734396eb7d5174d31610543f35df7e2f
SHA256

cfa0d59ebae84c10e974d835cc843fa75a3ed8cff0ee96da0d70e45b72ec62f0
SHA512

3d8b8c76eac9f8d03aba26900d69f74afebdf78187035e95c75dd6dae03c86b29062cd573b366b23b3c2dd21ae77a57e79671ea4812b8e2853859b6fc03f5078
SSDEEP

192:V22iKUQ3pWLrV8g7NmAlaOoun5p9xqI1bunb1AYNn8JaF09K6RmdDM1n:VSjHV8wwTWxxXeBWJayHRm

Score

N/A

Malware Config

Signatures

Files

cfa0d59ebae84c10e974d835cc843fa75a3ed8cff0ee96da0d70e45b72ec62f0
.dll windows x86

d473d0ec7e80bec42faaedd8cbf49ac9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexA
OpenProcess
GetCurrentProcessId
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
VirtualProtectEx
LoadLibraryA
CreateToolhelp32Snapshot
Module32First
ReadFile
GetModuleFileNameA
ReleaseMutex
WinExec
TerminateProcess
CreateThread
Sleep
GetCurrentProcess
Thread32Next
TerminateThread
GetThreadPriority
OpenThread
Thread32First
Process32First
lstrcmpiA
Process32Next
lstrlenA
CreateFileA
WriteFile
CloseHandle
GetTempPathA
GetSystemDirectoryA
Module32Next

user32

GetWindowThreadProcessId
EnumWindows
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shlwapi

StrStrIA

wininet

InternetCloseHandle

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
strcmp
_purecall
strstr
strncat
strcat
memset
strcpy
sprintf
_itoa

Sections

.bss
Size: - Virtual size: 9.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d473d0ec7e80bec42faaedd8cbf49ac9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

msvcrt

Sections

.bss Size: - Virtual size: 9.0MB

.data Size: 15KB - Virtual size: 14KB

.reloc Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 9.0MB

.data
Size: 15KB - Virtual size: 14KB

.reloc
Size: 9KB - Virtual size: 8KB