8f7d82ee5148a096eaefc921558a21ddd4a431478a979b7050d1c2bd680554c9

Sharing

Copy URL

Twitter E-mail

General

Target

8f7d82ee5148a096eaefc921558a21ddd4a431478a979b7050d1c2bd680554c9
Size

112KB
MD5

833742dd0aa297a1d1eb64bc70919b77
SHA1

15d3b479b4308e7227f5a7c54bb8a72740ab0711
SHA256

8f7d82ee5148a096eaefc921558a21ddd4a431478a979b7050d1c2bd680554c9
SHA512

fbe815c7a2cf3f1794353807d960620714f06a30dece5e498adc99645702f6b611bc05d01a0ab31b6bb5f7e0db9ec7a471c5ad7d904a7cbfe33a55a23bda21cc
SSDEEP

1536:jgshfbK7v1dJ8KOHxBFa2OmX3Q569L8v/ZnttJl+9:jgshzkdJaRanmyZttg

Score

N/A

Malware Config

Signatures

Files

8f7d82ee5148a096eaefc921558a21ddd4a431478a979b7050d1c2bd680554c9
.dll windows x86

67e5c342d32660e8618f44860146fd7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CloseHandle
GetVersionExA
lstrlenA
CreateEventA
FreeLibrary
LoadLibraryA
GetTickCount
GetTimeZoneInformation
WaitForSingleObject
OutputDebugStringA
CreateThread
lstrcatA
DeleteFileA
GetLastError
WriteFile
GetProcessHeap
GetTempFileNameA
GetModuleFileNameA
CreateProcessA
DeviceIoControl
GetVersion
FindClose
FindNextFileA
FindFirstFileA
VirtualQuery
WriteConsoleW
GetConsoleOutputCP
HeapFree
HeapAlloc
SetLastError
WideCharToMultiByte
lstrcpyA
CreateFileA
Sleep
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
FlushFileBuffers
HeapSize
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ExitProcess
GetStdHandle
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSection
GetCPInfo
GetACP

user32

GetMessageA
DispatchMessageA
wsprintfA
TranslateMessage

advapi32

RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

ole32

CoCreateGuid

wsock32

send
recv
htons
connect
select
__WSAFDIsSet
ioctlsocket
socket
inet_ntoa
setsockopt
WSAStartup
closesocket
WSAGetLastError
gethostbyname
gethostname
getsockname
getsockopt

Exports

Exports

load
update_load

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67e5c342d32660e8618f44860146fd7c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

wsock32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 96KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 100KB - Virtual size: 96KB

.reloc
Size: 8KB - Virtual size: 6KB