f4908fc23a4ae21c8445248fbaaf7e7a7525ef7b6f7cd8680fa809d6db9adede

Sharing

Copy URL Twitter E-mail

General

Target

f4908fc23a4ae21c8445248fbaaf7e7a7525ef7b6f7cd8680fa809d6db9adede
Size

79KB
MD5

c26993273633a40645e3c400977cc7b6
SHA1

0425d0a3131da6f507fbdaef52cd5faeb214afbb
SHA256

f4908fc23a4ae21c8445248fbaaf7e7a7525ef7b6f7cd8680fa809d6db9adede
SHA512

81c27f975aaedbd1db8d39f3e0c068ff2741b96f82b77fbc17d000007c92e7a17c836bbb4e58268cbbdd7732e2abcc4abd7b6d1dd2a5afa09c30e5ef3e9ff34c
SSDEEP

1536:HMukPd3idPZpGzy9BgHiWjotxs/1GAobUWjy1o:HMuSipGzy3ciyYxQGroZo

Score

N/A

Malware Config

Signatures

Files

f4908fc23a4ae21c8445248fbaaf7e7a7525ef7b6f7cd8680fa809d6db9adede
.dll windows x86

9357dd28888d256e6e02336d8beaaf2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
FindClose
FindFirstFileA
WaitForSingleObject
GetWindowsDirectoryA
ReleaseMutex
GetLastError
CreateMutexA
FreeLibrary
GetSystemDirectoryA
GetFileAttributesA
FindNextFileA
Sleep
DeleteFileA
GetLocalTime
GetFileSize
ReadFile
SetFilePointer
CreateFileA
WriteFile
Process32Next
ReadProcessMemory
VirtualQueryEx
VirtualAlloc
OpenProcess
Process32First
GetTempPathA
SetThreadPriority
CreateThread
CopyFileA
DeviceIoControl
GetTickCount
SetFileTime
GetFileTime
TerminateProcess
GetCurrentProcess
ExitProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
IsBadReadPtr
VirtualFree
lstrcmpiA
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
OpenThread
GetThreadContext
SetThreadContext
CloseHandle
Thread32Next
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
AddVectoredExceptionHandler

user32

wsprintfA
GetWindow
GetClassNameW
GetForegroundWindow
GetWindowTextW
ReleaseDC
GetDC
GetWindowRect
IsWindowVisible
GetWindowTextA
wsprintfW
FindWindowA
PostMessageA

gdi32

CreateDCA
GetDeviceCaps
CreateCompatibleDC
DeleteObject
BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap

advapi32

RegEnumKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
CryptReleaseContext

msvcrt

wcscmp
_strupr
_strlwr
wcsncpy
wcstombs
memcmp
exit
strrchr
_vsnprintf
wcsstr
wcsncat
strstr
wcslen
memset
memcpy
_except_handler3
strcat
strlen
_itoa
_stricmp
isprint
free
malloc
sprintf
strncpy
isspace
isalnum
atoi
strchr
strcpy
??3@YAXPAX@Z
_strcmpi
??2@YAPAXI@Z
mbstowcs
wcscat
wcscpy

wsock32

closesocket
WSAStartup
shutdown
inet_addr
WSAGetLastError
gethostbyname

gdiplus

GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImage

Exports

Exports

pfjaoidjglkajd

Sections

.bss
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9357dd28888d256e6e02336d8beaaf2f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

wsock32

gdiplus

Exports

Exports

Sections

.bss Size: - Virtual size: 2.0MB

.data Size: 49KB - Virtual size: 48KB

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 8KB - Virtual size: 8KB

.bss
Size: - Virtual size: 2.0MB

.data
Size: 49KB - Virtual size: 48KB

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 8KB - Virtual size: 8KB