02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8

Sharing

Copy URL

Twitter E-mail

General

Target

02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8
Size

222KB
MD5

1edd74e9364e74eb0b05148d26b6d433
SHA1

adbfcf70acc64c905290a9a66acc13cdf6981467
SHA256

02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8
SHA512

bd3f327f2c7cd592052767c0c73c50fcbad1e09abcaefc17c83121f5471825470bab335f0eca8e72c5e98a8d100a3b1f39c1aeaa42f28194214a8043009dd98c
SSDEEP

6144:/zl2f8SBbFjJT4WfscrJMnORemyTKWxewp:k8SBbFlT4WfsuJMOImEewp

Score

N/A

Malware Config

Signatures

Files

02781c82f885e57464a9824f6ea99e2a05e201171076750ed39e0598e5d3ccb8
.dll windows x86

88842dbf5f421599b5757772d2811735

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
Sleep
CloseHandle
SetStdHandle
FlushFileBuffers
SetFilePointerEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetStdHandle
WriteFile
IsProcessorFeaturePresent
GetLastError
HeapValidate
GetSystemInfo
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryExW
OutputDebugStringA
WriteConsoleW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
CreateFileW

msimg32

TransparentBlt
AlphaBlend
GradientFill

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88842dbf5f421599b5757772d2811735

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msimg32

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 6KB - Virtual size: 77KB

.rsrc Size: 1024B - Virtual size: 720B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 6KB - Virtual size: 77KB

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 10KB - Virtual size: 9KB