e8f260c9b0f056736b90feeaeceef45d2ed1d9660063797b6b02fd23275f48c6

Sharing

Copy URL

Twitter E-mail

General

Target

e8f260c9b0f056736b90feeaeceef45d2ed1d9660063797b6b02fd23275f48c6
Size

214KB
MD5

2d18abecd90b4d27064c1296fbececb9
SHA1

1690189eb75ca1cbd10006623c75ef880d2d2b6d
SHA256

e8f260c9b0f056736b90feeaeceef45d2ed1d9660063797b6b02fd23275f48c6
SHA512

f8ac6b067b58691f18c3e0d1f5317dbdfdb472125dd9db1a825d89d56d6b694057aad05c9b95cd10e64d7c8daebeb446993577a21d4dd511905e927d8d1291ac
SSDEEP

3072:dFUyuK82QDuphFot5wN7jyIEErPaeJZbNcsYmbRc0ExzpBI8Zv1LRMWzc55hz:JmeJZbN9YmbyFnBI8F1GZhz

Score

N/A

Malware Config

Signatures

Files

e8f260c9b0f056736b90feeaeceef45d2ed1d9660063797b6b02fd23275f48c6
.exe windows x86

4420104df3f6e78ccdda4763ddbba8bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAWaitForMultipleEvents
WSARecv
WSAGetLastError
WSACreateEvent
WSASetLastError
WSAEnumProtocolsA
accept
WSAResetEvent
setsockopt
bind
htons
htonl
WSASocketA
connect
inet_addr
WSAStartup
WSAGetOverlappedResult
recv
listen
send
closesocket
gethostname
inet_ntoa
gethostbyname
sendto
socket
WSACleanup

dskinlite

dsLoadSkin
dsInitKeys
dsSkinWindow
dsSetDrawItemVisible

kernel32

GetCurrentProcess
CreateFileA
GlobalFlags
InterlockedExchange
GetLocaleInfoA
GetCPInfo
GetOEMCP
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
VirtualAlloc
HeapSize
ExitProcess
HeapCreate
VirtualFree
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetLastError
Sleep
CreateThread
CloseHandle
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
GetModuleHandleA
SetLastError
LocalAlloc
LocalFree
lstrcmpW
GetVersionExA
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
FormatMessageA
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LeaveCriticalSection
LockResource
SizeofResource
InterlockedDecrement
GetProcAddress
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
EnterCriticalSection
TlsGetValue
HeapReAlloc

user32

ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
CheckMenuItem
GetSystemMetrics
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetKeyState
ValidateRect
GetMenuState
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
UnhookWindowsHookEx
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
DefWindowProcA
GetMenu
CreateDialogParamA
GetDC
EnableWindow
PostQuitMessage
EnableMenuItem
DialogBoxParamA
SetTimer
BeginPaint
EndPaint
GetClientRect
MoveWindow
SetScrollPos
SetScrollRange
GetWindowLongA
SetWindowLongA
ShowWindow
GetDesktopWindow
GetWindowRect
SetWindowPos
KillTimer
PostMessageA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetDlgCtrlID
IsWindow
EndDialog
GetDlgItem
SendMessageA
InvalidateRect
MessageBoxA
GetMenuItemID

gdi32

GetClipBox
SetTextColor
SetBkColor
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
PtVisible
CreateBitmap
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutA
GetDeviceCaps
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchDIBits
MoveToEx
LineTo
BitBlt
DeleteObject
RectVisible
DeleteDC

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

oleaut32

VariantClear
VariantChangeType
VariantInit

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4420104df3f6e78ccdda4763ddbba8bb

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

dskinlite

kernel32

user32

gdi32

winspool.drv

oleaut32

iphlpapi

Sections

.text Size: 153KB - Virtual size: 153KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 28KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 153KB - Virtual size: 153KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 28KB

.rsrc
Size: 21KB - Virtual size: 21KB