23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811

Sharing

Copy URL

Twitter E-mail

General

Target

23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811
Size

503KB
MD5

484d9615f10be93fe9e5fe475f4bcdc5
SHA1

3f5d2f28365ad8a2f3d6ecbfe5473bc74aa30b60
SHA256

23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811
SHA512

8d3474b1dce09e0930be89d4edcc6387bc348a2a8b8c0545392a8a8e4d4e409ddd3b858ba018aa6031a39253ac619c9ea94969e59a52b42ff3739a5249d7bb2b
SSDEEP

6144:55vs96S52c7sVNsO3Tje226RVL67GMZuuFJz4FIK7lQ58LOFcA7FIdCp:vI570sO2V67LxyF6FIIm2mR+

Score

N/A

Malware Config

Signatures

Files

23c78e805bd910b9f4af543b4f6079b4f02241ed808cca9f76a42465a73e4811
.dll windows x64

10bd00d0abeaf5e303eeeeb0c2200a15

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTime
VirtualAlloc
VirtualProtect
lstrcmpA
MoveFileA
CreateFileA
GetFileSize
WriteFile
GetTempPathA
CreateMutexA
ExitProcess
VirtualFree
GlobalAlloc
GetDateFormatA
GetTimeFormatA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetProcAddress
LoadLibraryA
lstrcatA
lstrcpyA
Sleep
GetProcessHeap
HeapFree
HeapAlloc
ExitThread
GetLastError
CloseHandle
DeleteFileA
Beep
GetTickCount
GetCommandLineA

user32

GetKeyboardLayout
ActivateKeyboardLayout
MessageBoxA
RegisterClassA

gdi32

SetTextColor
CreateFontIndirectA
DeleteObject
GetTextExtentPoint32A
SetBkMode
SetBkColor

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA

wininet

InternetCanonicalizeUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetQueryOptionA
InternetSetOptionA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA

Exports

Exports

DllMain
ahkc1bs1ks712qq8n20phz02qgrr09
bb37xnijbjonyf418zjoe1925
c4j3ta2fy
d8inp68id8zevgpr5j3jjx53zcjx6
e832b8z0dif4k3ryocyu2ue
f0m
fdx3
fr71e5mw5mvh5t9n
g5lyx6dgf6jcpho58wlqytc
gui5jvsgub72te
i02jv66n7vt8sf3l3n3m5eigo4hta3
m1qe
mossi7a2
mz2as0u48jatb
nftkiy8iyod8dglc86
nmcch
nn9vbc04
owxv
qe95e6owab5ape35r5j
rtw2ynn00khakjt9dwh59wlx
t6nmo40eaw904t
t9ycicolv51z00ihbjrh9
tj3r5
tp6s
u2mss35sdypsniy2
uqw
uy8g3z7dve7mbilcs
wzeab2
ywu6hb

Sections

.text
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 113B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10bd00d0abeaf5e303eeeeb0c2200a15

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

wininet

Exports

Exports

Sections

.text Size: 298KB - Virtual size: 297KB

.data Size: 512B - Virtual size: 65B

.rdata Size: 512B - Virtual size: 313B

.idata Size: 512B - Virtual size: 113B

.rdata Size: 15KB - Virtual size: 15KB

.data Size: - Virtual size: 176B

.pdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 181KB - Virtual size: 181KB

.reloc Size: 512B - Virtual size: 16B

.text
Size: 298KB - Virtual size: 297KB

.data
Size: 512B - Virtual size: 65B

.rdata
Size: 512B - Virtual size: 313B

.idata
Size: 512B - Virtual size: 113B

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: - Virtual size: 176B

.pdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 181KB - Virtual size: 181KB

.reloc
Size: 512B - Virtual size: 16B