f29b4358051d3a886764ad18d19de58d13f133de5ea4bc95c68e5876c953637a

General

Target

f29b4358051d3a886764ad18d19de58d13f133de5ea4bc95c68e5876c953637a
Size

60KB
MD5

055a6c6a17bb9c7bdb8e887a4e8e25b3
SHA1

460d67e6b744992b6da882dab075cd6495948375
SHA256

f29b4358051d3a886764ad18d19de58d13f133de5ea4bc95c68e5876c953637a
SHA512

14ea56c69885f69cec029121870f1d43a1c627d0f90d319a55c1ff6d4df00ad346168ccc82294553835b0d16d30c4a63e2831fe4808301960788745357e93734
SSDEEP

768:/DuXKMLBbbksJJYPVugzJIFnToIf1WZd6oyxuZ:/Du6MF3ksJkjzJIFnToIfWkoy

Score

N/A

Malware Config

Signatures

Files

f29b4358051d3a886764ad18d19de58d13f133de5ea4bc95c68e5876c953637a
.dll windows x86

e53a7597ca6f1b252c7b8192162eb2c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetModuleFileNameA
CloseHandle
GetCurrentProcess
GetStringTypeA
GetTickCount
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetBinaryTypeA
WinExec
DeleteFileA
GetStringTypeW
GetTempPathA
Sleep
LoadLibraryA
GetModuleHandleA
GetProcAddress
lstrcmpiA
GetVersionExA
LCMapStringW
GetSystemInfo

user32

GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
CallNextHookEx
CharLowerA
wsprintfA
SetWindowsHookExA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken

ws2_32

setsockopt
recv
send
sendto
recvfrom
closesocket
socket
inet_addr
htons
connect
gethostbyname
WSAStartup

msvcrt

strchr
_access
rename
strncmp
atoi
??2@YAPAXI@Z
_splitpath
malloc
free
_adjust_fdiv
sprintf
_except_handler3
strstr
_initterm

Exports

Exports

AR
GetVer
HTTPSendStrFun
w

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e53a7597ca6f1b252c7b8192162eb2c2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 4KB - Virtual size: 1010B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 4KB - Virtual size: 1010B