e4288d9318124942f015be960905f4e3502ee8ac29058fd3130bef102b689ebf

General

Target

e4288d9318124942f015be960905f4e3502ee8ac29058fd3130bef102b689ebf
Size

220KB
MD5

4ee7d3ac3ae2a4d91babdc0ce32bab56
SHA1

6502febbdaa2a7f9346b50c2fd471ac66c7aa958
SHA256

e4288d9318124942f015be960905f4e3502ee8ac29058fd3130bef102b689ebf
SHA512

f7d4f63de7333a93e8c511c65f1d1fd8e06d987e8f4804fd2c57106230e0d7471989ac21c07e913573aad97889fb9915909234171e1caae8190021b3713eee71
SSDEEP

3072:Ngd3QO/OrRmiTsV8ccECkxShqhiwfQo5SIEDNGn28GzmA1SceB8nvBr0m1Dnl:oXu4ie85ECkMhIiOs2nICA1fo8nt0m1

Score

N/A

Malware Config

Signatures

Files

e4288d9318124942f015be960905f4e3502ee8ac29058fd3130bef102b689ebf
.dll windows x86

ac14d1f6cfcccf83691f0aa0a88864df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
ExitProcess
FatalAppExitA
FindFirstFileA
GetCommandLineA
GetCommandLineW
GetExitCodeThread
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcessAffinityMask
GetProcessHeap
GetProcessWorkingSetSize
GetTickCount
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LeaveCriticalSection
LoadLibraryA
ReadProcessMemory
ResumeThread
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetThreadAffinityMask
Sleep
TerminateProcess
TerminateThread
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA

advapi32

AccessCheckAndAuditAlarmA
BuildTrusteeWithNameW
CreateServiceA
EqualSid
GetExplicitEntriesFromAclA
GetFileSecurityA
GetTrusteeTypeA
LogonUserW
LsaSetTrustedDomainInfoByName
OpenThreadToken
RegisterTraceGuidsA
SetSecurityDescriptorOwner

user32

ShowWindow
SetScrollInfo
GetMessageA
PtInRect
OpenClipboard
LoadCursorA
IntersectRect
GetKeyState
GetCapture
EnableWindow
DrawMenuBar
UpdateWindow
CheckMenuRadioItem

ole32

CoCreateGuid
IsEqualGUID
CreateAntiMoniker
CoGetContextToken
CoCreateInstance

ddraw

DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawCreateClipper
GetDDSurfaceLocal

Exports

Exports

LogPosToNormalPos

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac14d1f6cfcccf83691f0aa0a88864df

Headers

File Characteristics

Imports

kernel32

advapi32

user32

ole32

ddraw

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 116KB

.data Size: 92KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 116KB - Virtual size: 116KB

.data
Size: 92KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB