f2a69d50961c506950b6f1a57300c3b7adddf117f77bf203efba5980d0d58ffa

General

Target

f2a69d50961c506950b6f1a57300c3b7adddf117f77bf203efba5980d0d58ffa
Size

161KB
MD5

6ce864b5c9508b7029d696e461f0ecd0
SHA1

85db2087a68677446601f0314d6a00b37c9ea774
SHA256

f2a69d50961c506950b6f1a57300c3b7adddf117f77bf203efba5980d0d58ffa
SHA512

9f93b8e887556b1eb6188f61d0be908977b005a67c98d15c19704b233069513345a2d4817457a05380a902218095f6ef16e8f8f5089a75e79bbf4a5a06f77cb3
SSDEEP

3072:BuD9YAXdAcYB5MJIKv1BfPI1YgO9FPWcLKEbA/1b61s/2KChaD:BaYAXdi6JIKbpgOWc+EbQHCq

Score

N/A

Malware Config

Signatures

Files

f2a69d50961c506950b6f1a57300c3b7adddf117f77bf203efba5980d0d58ffa
.dll windows x86

97e976120512b12d0aeb371c3de5734e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
Sleep
GetVersionExA
GetACP
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchangeAdd
QueryPerformanceCounter
GetStartupInfoA
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
GetTickCount
GetProcessHeap
IsDebuggerPresent
GetLastError
GetComputerNameA
IsBadWritePtr
GetProcAddress

user32

GetCursor
GetMenuContextHelpId
GetWindowTextA
IsCharAlphaA
GetWindowRgn
GetWindowDC
IsClipboardFormatAvailable
GetIconInfo
GetDlgItem
GetTitleBarInfo
GetWindow
GetWindowThreadProcessId
GetGUIThreadInfo
GetParent
GetDesktopWindow
IsMenu
InSendMessage
BlockInput
SetLastErrorEx

advapi32

IsValidAcl
AreAnyAccessesGranted

msvcrt

_adjust_fdiv
malloc
_initterm
free
memmove
_memicmp
_swab
_memccpy
_ultoa
_CItanh
_itoa
_ltoa
rand
_CIcosh
floor
frexp
ldexp
modf
_pctype
_isctype
localeconv
__mb_cur_max
_errno
_CIsinh

gdi32

GetBitmapDimensionEx
GetStretchBltMode

ole32

CoFileTimeNow
CoDosDateTimeToFileTime
CoGetCurrentProcess

shell32

ord66
ord680
ord524

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97e976120512b12d0aeb371c3de5734e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

ole32

shell32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 61KB - Virtual size: 63KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 61KB - Virtual size: 63KB

.reloc
Size: 3KB - Virtual size: 2KB