fe633dd228f91a0f4d55cc7c2f63d88d3ac70cc4bd938146320fbb87c4b565be

General

Target

fe633dd228f91a0f4d55cc7c2f63d88d3ac70cc4bd938146320fbb87c4b565be
Size

248KB
MD5

07120cc5eb52149d10b8634ae9614cf8
SHA1

7270057fdc267a5dd19c0962a275157abfd49494
SHA256

fe633dd228f91a0f4d55cc7c2f63d88d3ac70cc4bd938146320fbb87c4b565be
SHA512

68c2bce9d42f452e9b28124765d744cfa8ea9f8e87cabbe41cbcf4a9aa01538abf7e9f4b9044568d25c3e7d597168f5fca658e001bd4d06674c1d701f194f1b5
SSDEEP

768:H5X6nX0jVFzT03wg7weNLE44xhnfw7WF6F5qtBBQARQksGv:HV6n2VngE6F5qtBBQAR

Score

N/A

Malware Config

Signatures

Files

fe633dd228f91a0f4d55cc7c2f63d88d3ac70cc4bd938146320fbb87c4b565be
.dll windows x86

4c3b39a434b9b2e3cdba0c94cb858035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_strupr
_snprintf
RtlZeroMemory
RtlUnwind
memcmp
memcpy
strlen
strstr

ws2_32

closesocket
gethostname

kernel32

CreateFileA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
MoveFileExA
CloseHandle
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
ExitProcess
IsBadReadPtr
WritePrivateProfileStringA
MapViewOfFile
CreateFileMappingA
CreateProcessA
DeleteFileA
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetTempFileNameA
GetTempPathA

user32

SetTimer
SendMessageA
RegisterWindowMessageA
KillTimer
GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c3b39a434b9b2e3cdba0c94cb858035

Headers

File Characteristics

Imports

ntdll

ws2_32

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 28KB

.bss Size: - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 204KB - Virtual size: 202KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 28KB

.bss
Size: - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 204KB - Virtual size: 202KB

.reloc
Size: 4KB - Virtual size: 1KB