d458df268731207007e67a9503be559fdda21ed981c8a3f211393bb9dc842f0b

Sharing

Copy URL Twitter E-mail

General

Target

d458df268731207007e67a9503be559fdda21ed981c8a3f211393bb9dc842f0b
Size

319KB
MD5

8f2b12a2d7fb92713b47e10ea07de421
SHA1

9584f410e25eb3672be1e0e995c773c2ac5cc906
SHA256

d458df268731207007e67a9503be559fdda21ed981c8a3f211393bb9dc842f0b
SHA512

070ce12534bbd376d6a7ab5208ad3cfa7f412381de7d6bf912545ac57d860b6ec5b803ddb63dd9e6bb846215a614166997b467fd2eb5edf76734c0e8a4e7e899
SSDEEP

6144:29YKcVW5OXZuULU2q7NMqEGvP7TTHqvTVuT3N5ypFv39Mj0mXE8zDjcPnT7H+mxg:/KcE5OXZuUNYNMXiDTTHqvQT3N8pFv38

Score

N/A

Malware Config

Signatures

Files

d458df268731207007e67a9503be559fdda21ed981c8a3f211393bb9dc842f0b
.dll windows x86

548ff9b537a546571022171b5d215412

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

IsBadReadPtr
VirtualAllocEx
GetModuleHandleA
GetACP
ExitThread
GlobalAlloc
VirtualAlloc
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
LoadLibraryA
GetOEMCP

msvcrt

sin
swprintf
sqrt
wcschr

gdi32

CopyEnhMetaFileA
GetClipBox
CreateBitmap
LineTo
GetPaletteEntries
GetPixel
GetObjectA
GetDIBColorTable
BitBlt
CreateBrushIndirect

shlwapi

SHStrDupA
SHQueryInfoKeyA
SHDeleteKeyA
SHEnumValueA
PathFileExistsA
SHQueryValueExA
SHGetValueA

Sections

CODE
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES0
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES2
Size: 512B - Virtual size: 47B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES7
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

548ff9b537a546571022171b5d215412

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

shlwapi

Sections

CODE Size: 116KB - Virtual size: 115KB

DATA Size: 185KB - Virtual size: 184KB

RES4 Size: 2KB - Virtual size: 1KB

RES0 Size: 512B - Virtual size: 215B

RES6 Size: 1KB - Virtual size: 1KB

RES2 Size: 512B - Virtual size: 47B

RES9 Size: 1KB - Virtual size: 1KB

RES3 Size: 512B - Virtual size: 196B

RES7 Size: 1024B - Virtual size: 782B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 688B

CODE
Size: 116KB - Virtual size: 115KB

DATA
Size: 185KB - Virtual size: 184KB

RES4
Size: 2KB - Virtual size: 1KB

RES0
Size: 512B - Virtual size: 215B

RES6
Size: 1KB - Virtual size: 1KB

RES2
Size: 512B - Virtual size: 47B

RES9
Size: 1KB - Virtual size: 1KB

RES3
Size: 512B - Virtual size: 196B

RES7
Size: 1024B - Virtual size: 782B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 688B