bb477db1d13d7bd3206af3bff4b4f31f7766d4cd251add59fe2e3739309ed69d

General

Target

bb477db1d13d7bd3206af3bff4b4f31f7766d4cd251add59fe2e3739309ed69d
Size

19KB
MD5

0ebb97043e3c185fdc21c034e7f904c9
SHA1

6dbb748427bb1745c5ef4f59ee834311216ecd02
SHA256

bb477db1d13d7bd3206af3bff4b4f31f7766d4cd251add59fe2e3739309ed69d
SHA512

afeaffa1da52f92a2b83f2a6e1fd1c4c52e6de172167d6d66ff03424a42153af8a132bd4156b929a1bb7a52944b7c7c414667182a61da56d0e7c080bb6dca068
SSDEEP

384:wkSBqp66Gx3vTIa+T0thvMTl/t68CH28DTwQS:wkvpe3vTIa+AH/H/wD

Score

N/A

Malware Config

Signatures

Files

bb477db1d13d7bd3206af3bff4b4f31f7766d4cd251add59fe2e3739309ed69d
.dll windows x86

35103242f38ffa4b996a6626f9a16a57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetWindowsDirectoryA
VirtualProtect
VirtualQuery
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
Thread32First
GetProcAddress
Thread32Next
CloseHandle
GetModuleHandleA
CreateThread
ExitThread
LoadLibraryA
OutputDebugStringA
Sleep

user32

CallNextHookEx
SetWindowsHookExA
TranslateMessage
DispatchMessageA
GetMessageA
MessageBoxA

ws2_32

htons
inet_addr
gethostbyname
connect
send
closesocket
socket
WSAStartup
WSACleanup

wininet

InternetGetConnectedState
InternetOpenA
HttpSendRequestA
HttpSendRequestW
InternetCloseHandle

msvcrt

_except_handler3
_local_unwind2
sprintf

winmm

timeGetTime

Exports

Exports

FURONGJIEJIE

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MaShared
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35103242f38ffa4b996a6626f9a16a57

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

wininet

msvcrt

winmm

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 13KB

Shared Size: 512B - Virtual size: 64B

MaShared Size: 512B - Virtual size: 64B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 13KB

Shared
Size: 512B - Virtual size: 64B

MaShared
Size: 512B - Virtual size: 64B

.reloc
Size: 2KB - Virtual size: 2KB