d9fca235a17b9540d3d811af6c5835aa24eeaf5669002a4e61f14aab593b3a79

General

Target

d9fca235a17b9540d3d811af6c5835aa24eeaf5669002a4e61f14aab593b3a79
Size

204KB
MD5

0ccecd9efc559e9cec248c5bbd3906fd
SHA1

f95c9116533319fded89177cf16a45c4b739393a
SHA256

d9fca235a17b9540d3d811af6c5835aa24eeaf5669002a4e61f14aab593b3a79
SHA512

4e87a37251f048fa782d828abc1afd5e4989434da7a00eb09116efaa122d498de81db39e4c0ba257bbe53fa25ea605e190bdc7a7c76eda2f26caf2d30ad03d10
SSDEEP

768:+fzAkmcIcM+ZQXuOXv7m7rjxMKyxIq3g2GjSqaHnzmzmXrhripWJ:+LDm4iX7XvqTxfyxdujSqaEmrip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9fca235a17b9540d3d811af6c5835aa24eeaf5669002a4e61f14aab593b3a79

Files

d9fca235a17b9540d3d811af6c5835aa24eeaf5669002a4e61f14aab593b3a79
.dll windows:4 windows x86 arch:x86

9a20af8da276b53974280520187f1334

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetModuleFileNameA
Sleep
ReadFile
WriteFile
GetVersionExA
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetEndOfFile
GetVersion
CreateThread
CloseHandle
GetModuleHandleA
LocalFree
GetModuleFileNameW
LoadLibraryW
GetPrivateProfileStringW
GetProcAddress

user32

DestroyWindow
SetTimer
KillTimer
EnableWindow
GetDlgItemInt
GetWindowTextA
EnumWindows
GetClassNameA
SetWindowTextA
wsprintfA
GetKeyState
ShowWindow
ShowCursor
GetWindowRect
SetWindowPos
SendDlgItemMessageA
GetDlgItem
SendMessageA
keybd_event

ws2_32

htons
inet_addr

msvcrt

_adjust_fdiv
strlen
wcscat
_waccess
wcscpy
memcpy
wcsrchr
wcslen
strcpy
abs
sprintf
_ftol
strcmp
malloc
free
memset
atoi
_exit
sscanf
strrchr
_mbscmp
_mbsstr
??2@YAPAXI@Z
_initterm

apihooks

UnhookApis

Exports

Exports

ApiHookChain
HooksCanUnloadNow
Init

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a20af8da276b53974280520187f1334

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

msvcrt

apihooks

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 156KB - Virtual size: 549KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 156KB - Virtual size: 549KB

.reloc
Size: 8KB - Virtual size: 5KB